Lucene search
+L

6 matches found

NVD
NVD
added 2026/08/27 5:20 p.m.10 views

CVE-2026-81102

The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcpserverdash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback...

3.1CVSS0.0014EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/27 2:50 p.m.60 views

CVE-2026-81102 Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation

The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcpserverdash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback...

3.1CVSS0.0014EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/27 2:50 p.m.29 views

CVE-2026-81102

CVE-2026-81102 affects the Dropbox Dash MCP server (src/mcp_server_dash.py), which in its network mode bound its listener to the loopback address but never validated the Host header , and included no transport-security settings. This allowed a DNS rebinding attack: a malicious page in a visitor's...

3.1CVSS5.3AI score0.0014EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/27 2:50 p.m.10 views

EUVD-2026-67030

The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcpserverdash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback...

3.1CVSS5.3AI score0.0014EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/27 2:50 p.m.14 views

CVE-2026-81102 Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation

The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcpserverdash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback...

3.1CVSS5.8AI score0.0014EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.28 views

PT-2026-82575

Name of the Vulnerable Software and Affected Versions Dash MCP server affected versions not specified Description In network mode, the server binds its listener to the loopback address but fails to verify the host name of incoming requests. Within src/mcp server dash.py, the server is configured...

3.1CVSS5.9AI score0.0014EPSS
SaveExploits0References5
Rows per page
Query Builder