CVE-2026-61542

The Gearboy emulator and debugger is vulnerable in its Gearsystem component when using the optional --mcp-http mode. The underlying cause is that the platforms/shared/desktop/mcp/mcp_transport.h transport binds to INADDR_ANY (typically on port 7777) and fails to perform Authorization , Host , or ...