CVE-2026-13489

creationtimestamp| type| source ---|---|--- 2026-06-28 14:15:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe5wrciqr22 2026-06-29 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mpgfoxg4gp23 2026-06-29 15:14:17+00:00| seen|...

CVE-2026-13489 78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization

A weakness has been identified in 78 xiaozhi-esp32 up to 2.2.6. Affected by this issue is the function ParseMessage of the file main/mcpserver.cc of the component MCP Response Handler. This manipulation causes improper synchronization. Remote exploitation of the attack is possible. The attack's...