CVE-2026-111091

In JetBrains Junie CLI versions prior to 26.8.3 , an attacker could achieve code execution by leveraging an untrusted project's MCP server configuration . This vulnerability is associated with CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). The risk is rated as HIGH with a CVS...

CVE-2026-111091

In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration...

EUVD-2026-102144

In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration...

http-mcp-bridge

HTTP MCP Bridge This project implements an HTTP server that acts as a bridge between HTTP/1.1 requests and a remote MCP server, using the mcp python library GitHub. The main purpose of this initiative is to be able to use HTTP security tools to test remote MCP servers using the remote transport...

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence AI applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, w...

CVE-2026-57496: Improper Limitation of a Pathname to a Restricted Directory

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.8, netlicensinggetproduct passes the caller-controlled productnumber to src/netlicensingmcp/tools/products.py, which interpolat...

PT-2026-114987

Name of the Vulnerable Software and Affected Versions JetBrains Junie CLI versions prior to 26.8.3 Description Remote code execution is possible through the MCP server configuration of an untrusted project. In headless environments such as Continuous Integration CI systems, the software is design...

Malware in @revizahoshii/hoshino-mcp-server

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-17825 Malicious code in @revizahoshii/hoshino-mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9672a5dc6f8c45d8f76743e019edc248d1ba5523560bbe6e2a8185bac64b668c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

pyghidra-mcp

PyGhidra-MCP - Servidor del Protocolo de Contexto de Modelo para Ghidra Descripción general pyghidra-mcp es un servidor de línea de comandos del Protocolo de Contexto de Modelo MCP que lleva todo el poder analítico de Ghidra, una robusta suite de ingeniería inversa de software SRE, al mundo de lo...

CVE-2026-108851

phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faqsearch tool that allows MCP clients to read restricted FAQs because Search::searchDatabase never applies user or group permission checks. Attackers connected to the phpmyfaq:mcp:server can issue search...

EUVD-2026-97007

UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers via POST /v1/appspace/app/key. Attackers supplying a victim's MCP server UUID with appType mcpserver can open MCP sessions and invoke the...

CVE-2026-108851

The phpMyFAQ application (through version 4.1.10 ) is vulnerable to a missing authorization flaw in the MCP server faq_search tool . The root cause is that the Search::searchDatabase() function fails to apply necessary user or group permission checks. Consequently, an attacker connected to the ph...

EUVD-2026-97002

phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faqsearch tool that allows MCP clients to read restricted FAQs because Search::searchDatabase never applies user or group permission checks. Attackers connected to the phpmyfaq:mcp:server can issue search...

CVE-2026-108851 phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool

phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faqsearch tool that allows MCP clients to read restricted FAQs because Search::searchDatabase never applies user or group permission checks. Attackers connected to the phpmyfaq:mcp:server can issue search...

CVE-2026-108851 phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool

phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faqsearch tool that allows MCP clients to read restricted FAQs because Search::searchDatabase never applies user or group permission checks. Attackers connected to the phpmyfaq:mcp:server can issue search...

EUVD-2026-96610

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out. Attackers can obtain record ids from the unguarded /airag/app/queryById endpoint and retrieve MCP...

CVE-2026-108851: Missing Authorization

phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faqsearch tool that allows MCP clients to read restricted FAQs because Search::searchDatabase never applies user or group permission checks. Attackers connected to the phpmyfaq:mcp:server can issue search...

PT-2026-110170

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.11 Description An authorization flaw exists in the MCP server faq search tool. This occurs because the searchDatabase function fails to apply user or group permission checks. Consequently, clients connected to th...

CVE-2026-108671

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out. Attackers can obtain record ids from the unguarded /airag/app/queryById endpoint and retrieve MCP...