CVE-2026-61542 Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools

Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem, the affected component, has an optional --mcp-http mode that accepts unauthenticated MCP requests from any reachable network peer despite localhost-only documentation and...