CVE-2026-107938 Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.

In Apache CXF, the Netty-based HTTP client transport cxf-rt-transports-http-netty-client did not verify that the hostname in the server’s TLS certificate matched the host being called. This applied over both HTTP/1.1 and HTTP/2, even when disableCNCheck was left at its default value of false. The...

PT-2026-80244

Summary The HTTP client transport in mcp/sdk reads a Server-Sent-Events SSE response stream incrementally and appends each 4 KiB chunk to an in-memory buffer $this-sseBuffer .= $chunk; with no upper bound. The buffer is only ever flushed when an SSE event delimiter " " appears. A remote MCP serve...

MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)

Summary The stdio transports in MCP::Server::Transports::StdioTransport and MCP::Client::Stdio read newline-delimited JSON-RPC frames using IOgets with no limit argument. CRuby's IOgets with no limit reads from the current position until the next separator \n with no upper bound on the returned...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to improper enforcement of the Certificate Revocation List on the gRPC listener when separate listeners are configured for HTTP and gRPC client endpoints. An attacker can gain unauthorized access and...

CVE-2026-49949

CodexBar

mcp-stdio-exploit

MCP STDIO Exploit: A Local Reimplementation Vulnerability...

CVE-2026-6130

A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioClientTransport of the file src/main/mcp/ipc-stdio-transport.ts of the component Model Context Protocol Server Management System. Executing a manipulation of the argument args/env can lead to os command...

CVE-2026-6130 chatboxai chatbox Model Context Protocol Server Management System ipc-stdio-transport.ts StdioClientTransport os command injection

A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioClientTransport of the file src/main/mcp/ipc-stdio-transport.ts of the component Model Context Protocol Server Management System. Executing a manipulation of the argument args/env can lead to os command...

CVE-2026-6130

CVE-2026-6130 affects chatboxai up to version 1.20.0, impacting the StdioClientTransport function in src/main/mcp/ipc-stdio-transport.ts within the Model Context Protocol Server Management System. The root cause is a flaw where manipulating the argument list (args/env) enables os command injectio...

mcp-csharp-cmdexe-poc

MCP C SDK cmd.exe Argument Injection PoC Proof of concept fo...

AlmaLinux 9 : keylime (ALSA-2026:2224)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:2224 advisory. keylime: Keylime: Authentication bypass allows unauthorized administrative operations due to missing client-side TLS authentication CVE-2026-1709 Tenable has...

Flowise Custom MCP Remote Code Execution

This module exploits a remote code execution vulnerability in Flowise versions = 2.2.7-patch.1 and use exploit/multi/http/flowise/custommcprce msf undefinedcustommcprce show actions ...actions... msf undefinedcustommcprce set ACTION msf undefinedcustommcprce show options ...show and set options...

org.eclipse.jetty.documentation:jetty-documentation (>=10.0.8, <=10.0.19), org.eclipse.jetty.http3:http3-client (>=10.0.8, <=10.0.19) +5 more potentially affected by CVE-2024-22201 via org.eclipse.jetty.http3:http3-common (>=10.0.8, <=10.0.19)

org.eclipse.jetty.http3:http3-common MAVEN version =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.10, =5.26.1, =5.27.4 Source cves: CVE-2024-22201 Source advisory: OSV:GHSA-RGGV-CV7R-MW98...

org.eclipse.jetty.documentation:jetty-documentation (>=10.0.8, <=10.0.19), org.eclipse.jetty.http3:http3-client (>=10.0.8, <=10.0.19) +5 more potentially affected by CVE-2024-22201 via org.eclipse.jetty.http3:http3-common (>=10.0.8, <=10.0.19)

org.eclipse.jetty.http3:http3-common MAVEN version =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.10, =5.26.1, =5.27.4 Source cves: CVE-2024-22201 Source advisory: GHSA-RGGV-CV7R-MW98...

org.eclipse.jetty.documentation:jetty-documentation (>=10.0.8, <=10.0.19), org.eclipse.jetty.http3:http3-client (>=10.0.8, <=10.0.19) +5 more potentially affected by CVE-2024-22201 via org.eclipse.jetty.http3:http3-common (>=10.0.8, <=10.0.19)

org.eclipse.jetty.http3:http3-common MAVEN version =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.10, =5.26.1, =5.27.4 Source cves: CVE-2024-22201 Source advisory: MEND:CVE-2024-22201...

IBM WebSphere MQ 9.0.1 < 9.0.3 Multiple Vulnerabilities

According to its self-reported version, the IBM WebSphere MQ server installed on the remote Windows host is 9.0.1 or 9.0.2 prior to 9.0.3. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to the insecure transmission of credentials in...