CVE-2026-81102 Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation

The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcpserverdash.py constructed the server for its network mode with the interface restricted to loopback and no transport-security settings, so a name that had been pointed at the loopback...

EUVD-2026-67028

tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a request whatever host it named, making t...

CVE-2026-81100

tiger-gh-mcp-server (by Timescale) started its MCP HTTP transport without enabling the DNS-rebinding-protection option provided by the underlying SDK. The file src/httpServer.ts called the shared httpServerFactory helper but never set the host allow-list, so the transport accepted requests regard...

EUVD-2026-67026

The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they wer...

CVE-2026-81098 Telnyx MCP Server through 6.83.0 Missing Authentication on Streamable HTTP Transport

The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they wer...

CVE-2026-81098

The Telnyx MCP server (telnyx-node package through 6.83.0 ) exposed its Streamable HTTP transport on all network interfaces without requiring caller credentials. The vulnerable component, packages/mcp-server/src/http.ts, bound its listener to every interface and parsed authentication headers in a...

CVE-2026-81098 Telnyx MCP Server through 6.83.0 Missing Authentication on Streamable HTTP Transport

The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they wer...

CVE-2026-81097 rails-mcp-server 1.4.0 through 1.6.0 OS Command Execution via execute_ruby PTY Escape

The executeruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kernel. The pseudo-terminal library's spawn entry points are neither in the denylist nor replaced, so a normal tool call could reach...

CVE-2026-81097

rails-mcp-server (versions 1.4.0 through 1.6.0 ) contains an OS command execution vulnerability in the execute_ruby tool. The tool is documented as a read-only Ruby sandbox enforced by a pattern denylist and replacements for process-spawning methods on Kernel , but the pseudo-terminal library's s...

EUVD-2026-67148

The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/gethtmlskeleton.ts validated the url argument with isValidHttpUrl from src/utils/generic.ts, which confirmed the string began with an http or https scheme and parsed as a U...

CVE-2026-81093

Apify Actors MCP Server before version 0.9.12 is vulnerable to Server-Side Request Forgery (SSRF) via the get-html-skeleton tool. The URL validation function (isValidHttpUrl) in src/utils/generic.ts confirmed only that the argument began with an http/https scheme and parsed as a URL, without insp...

CVE-2026-81093 Apify Actors MCP Server before 0.9.12 Server-Side Request Forgery via get-html-skeleton

The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/gethtmlskeleton.ts validated the url argument with isValidHttpUrl from src/utils/generic.ts, which confirmed the string began with an http or https scheme and parsed as a U...

CVE-2026-81093 Apify Actors MCP Server before 0.9.12 Server-Side Request Forgery via get-html-skeleton

The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/gethtmlskeleton.ts validated the url argument with isValidHttpUrl from src/utils/generic.ts, which confirmed the string began with an http or https scheme and parsed as a U...

CVE-2026-23744-Remote-Code-Execution-POC

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept POC MCPJam inspector 3. Führen Sie den Exploit aus root@kitploit: python3 exploit.py...

CVE-2026-34200

Nhost MCP Server: Kompromittierung der Infrastruktur mit einem Klick Offizielles Advisory: Diese Schwachstelle wurde von Nhost anerkannt und veröffentlicht: GHSA-6c5x-3h35-vvw2 Dieses Repository dokumentiert eine Schwachstelle im Nhost Local MCP Server. Der Dienst verfügt über keine eingehende...

CVE-2026-33980

CVE-2026-33980 — Iniezione KQL in adx-mcp-server tramite il parametro tablename Gravità : Alta CVSS 8.8 CWE : CWE-943 — Neutralizzazione impropria di elementi speciali nella logica delle query di dati Interessati : adx-mcp-server = 0.1.0 commit 48b2933 Avviso : GHSA NVD :...

MCPwnfluence

MCPwnfluence — CVE-2026-27825 e CVE-2026-27826 Due vulnerabilità critiche in mcp-atlassian, uno dei server MCP più popolari dell'ecosistema oltre 4.4K stelle su GitHub, oltre 4M di download. Scoperte dal team di Pluto Security. Le Vulnerabilità...

CVE-2026-23744-POC

CVE-2026-23744 — MCP Server Unauthenticated RCE Proof-of-Concept-Exploit vond3vn0mi Übersicht CVE-2026-23744 ist eine nicht authentifizierte Remote-Code-Execution-Schwachstelle RCE in MCP-kompatiblen Servern, die auf Port 6274 bereitgestellt werden. Der Endpunkt /api/mcp/connect akzeptiert ein...

CVE-2026-23744

CVE-2026-23744 Exploit für MCPJam Inspector Installieren Sie die Bibliotheken mit: pip install -r requirements.txt - verwenden Sie python CVE-2026-23744 --help für Informationen MCPJam Inspector ist die lokale-first Entwicklungsplattform für MCP-Server. Die neuesten Versionen 1.4.2 und früher sin...

MCPDebugger

Server MCP Debugger di Fatmike Introduzione Questo progetto è un MCP Debugger Server leggero e fatto in casa, sviluppato per apprendimento e sperimentazione. Il MCP Debugger Server espone funzionalità di debug come strumenti MCP, consentendo a client MCP esterni di controllare l'esecuzione,...