Lucene search
+L

40 matches found

Cvelist
Cvelist
•added 2026/10/28 9:40 p.m.•26 views

CVE-2026-61546 AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools

AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard application. Prior to version 0.21.0, ankimcpserver/mcpserver.py globally disables FastMCP DNS-rebinding protection through TransportSecuritySettings with...

8.8CVSS0.00181EPSS
SaveExploits0References4
Rows per page
Query Builder