Lucene search
+L

7 matches found

NVD
NVD
•added 2026/08/31 6:17 p.m.•10 views

CVE-2026-79746

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.31, when a bearer key with accessType: 'servers' or 'custom' is used against a group route,...

8.1CVSS0.00426EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/31 5:55 p.m.•37 views

CVE-2026-79746

MCPHub (by samanhappy) is a unified hub for managing and orchestrating multiple MCP servers into separate endpoints with flexible routing. Prior to version 1.0.31 , the isBearerKeyAllowedForRequest function contained an authorization flaw: when a bearer key with accessType: 'servers' or 'custom' ...

8.1CVSS5.7AI score0.00426EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/31 5:55 p.m.•16 views

CVE-2026-79746 MCPHub: Server-scoped bearer key gains access to an entire group via partial (any-overlap) server matching

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.31, when a bearer key with accessType: 'servers' or 'custom' is used against a group route,...

8.1CVSS5.7AI score0.00426EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/31 5:55 p.m.•39 views

CVE-2026-79746 MCPHub: Server-scoped bearer key gains access to an entire group via partial (any-overlap) server matching

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.31, when a bearer key with accessType: 'servers' or 'custom' is used against a group route,...

8.1CVSS0.00426EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/31 5:55 p.m.•15 views

EUVD-2026-68688

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.31, when a bearer key with accessType: 'servers' or 'custom' is used against a group route,...

8.1CVSS5.7AI score0.00426EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/31 12:00 a.m.•2 views

CVE-2026-79746: Incorrect Authorization

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.31, when a bearer key with accessType: 'servers' or 'custom' is used against a group route,...

8.1CVSS5.7AI score0.00426EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/31 12:00 a.m.•19 views

PT-2026-83944

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.31, when a bearer key with accessType: 'servers' or 'custom' is used against a group route,...

8.1CVSS5.7AI score0.00426EPSS
SaveExploits0References5
Rows per page
Query Builder