81 matches found
nightingale
Experto en alertas de código abierto English | 中文 🎯 Qué es Nightingale Nightingale es un proyecto de monitoreo de código abierto centrado en las alertas. Al igual que Grafana, Nightingale también se conecta con diversas fuentes de datos existentes. Sin embargo, mientras que Grafana hace hincapié ...
CVE-2026-33032
CVE-2026-33032 / MCPwn Non-destructive detection tooling for the nginx-ui MCP authentication bypass known publicly as MCPwn. Ship a two-HTTP-request unauthenticated takeover of any nginx-ui instance running a vulnerable version. Table of Contents 1. Quick Facts 2. Vulnerability Overview 3...
cve-2026-33032-scanner
CVE-2026-33032 Scanner Non-destructive vulnerability scanner for Nginx-UI MCP Endpoint Authentication Bypass Vulnerability Overview CVE-2026-33032 is an authentication bypass vulnerability in nginx-ui's Model Context Protocol MCP integration. The /mcpmessage endpoint lacks authentication middlewa...
siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization
CVE-2026-66012 — SiYuan MCP Unauthenticated Administrator Takeover Proof of Concept for CVE-2026-66012 CVSS 10.0 Critical, a missing-authorization vulnerability in SiYuan's MCP Model Context Protocol endpoint that allows an unauthenticated attacker to achieve administrator takeover and remote cod...
EUVD-2026-84743
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, requests to the HTTP MCP endpoint without a per-user identity are allowed to reach tool handlers, which then use globally configured Jira or Confluence credentials. A network caller c...
CVE-2026-77254 MCP Atlassian: Unauthenticated HTTP MCP requests can use globally configured Jira and Confluence credentials
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, requests to the HTTP MCP endpoint without a per-user identity are allowed to reach tool handlers, which then use globally configured Jira or Confluence credentials. A network caller c...
CVE-2026-77254 MCP Atlassian: Unauthenticated HTTP MCP requests can use globally configured Jira and Confluence credentials
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, requests to the HTTP MCP endpoint without a per-user identity are allowed to reach tool handlers, which then use globally configured Jira or Confluence credentials. A network caller c...
CVE-2026-77254: Missing Authentication for Critical Function
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, requests to the HTTP MCP endpoint without a per-user identity are allowed to reach tool handlers, which then use globally configured Jira or Confluence credentials. A network caller c...
CVE-2026-77519
MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, the /chat/api/mcp authentication path looks up an ApplicationApiKey using only its secret and active status, without enforcing the ispermanent and expiretime checks used by the standard chat API. A previously valid,...
CVE-2026-61568
@zereight/mcp-gitlab is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a victim's local MCP listener while preservin...
EUVD-2026-79999
@zereight/mcp-gitlab is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a victim's local MCP listener while preservin...
PT-2026-91938
Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api/mcp endpoint that allows attackers with any application's clientId and clientSecret to gain unrestricted access to user administration across all organizations. Attackers can enumerate user records including password...
CVE-2026-61568: Reliance on Reverse DNS Resolution for a Security-Critical Action
@zereight/mcp-gitlab is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a victim's local MCP listener while preservin...
Security Bulletin: Langflow is vulnerable to authentication bypass and insufficient session expiration
Summary Langflow provides API key-based authentication for programmatic access to flow execution and MCP endpoints. The MCP HTTP API credential resolvers do not apply the same AUTOLOGIN API-key guard that all standard authenticated endpoints enforce; when Langflow is in its default AUTOLOGIN...
CVE-2026-59822
A flaw was found in LiteLLM, a proxy server designed for Large Language Model LLM APIs. An unauthenticated attacker could exploit a vulnerability in the MCP Streamable HTTP endpoint. By using a fabricated Authorization header, the attacker could bypass the standard key validation, gaining...
CVE-2026-45018
Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the POST /mcp endpoint without requiring authentication. For stdio transport, the...
CVE-2026-45019
Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the POST /mcp endpoint without requiring authentication. For sse and streamable-http...
Server-side Request Forgery (SSRF)
Overview chainlit is a Build Conversational AI. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the /mcp connect handling in backend/chainlit/server.py. An attacker can force the server to make outbound HTTP requests to arbitrary internal or external URLs ...
CVE-2026-45019
Chainlit (a Python framework for building conversational AI applications) is affected by an SSRF vulnerability in its MCP integration. From version 2.4.0rc0 to 2.12.0 , deployments with features.mcp.enabled = true expose the POST /mcp endpoint without authentication. For SSE and streamable-http t...