Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/02/09 7:14 a.m.•15 views

CVE-2026-2131

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function inputtext. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...

8.8CVSS5.4AI score0.17473EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/08 3:15 a.m.•15 views

CVE-2026-2131

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function inputtext. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...

8.8CVSS5.6AI score0.17473EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/08 2:32 a.m.•9 views

CVE-2026-2131

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function inputtext. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...

6.5CVSS6.4AI score0.17473EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
•added 2026/02/08 2:32 a.m.•16 views

EUVD-2026-5817

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function inputtext. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...

6.5CVSS6.3AI score0.17473EPSS
SaveExploits1References4
CVE
CVE
•added 2026/02/08 2:32 a.m.•36 views

CVE-2026-2131

CVE-2026-2131 affects XixianLiang HarmonyOS-mcp-server 0.1.0, specifically the input_text function. The vulnerability allows remote OS command injection due to manipulation of the text argument. Exploitation is described as remote with a publicly available exploit. Documented impact includes pote...

8.8CVSS6.6AI score0.17473EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/08 12:00 a.m.•1 views

CVE-2026-2131: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1.0. This vulnerability affects the function inputtext. The manipulation of the argument text leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...

8.8CVSS6.5AI score0.17473EPSS
SaveExploits1References1
Rows per page
Query Builder