3 matches found
CVE-2026-35568: Origin Validation Error
MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerability. This vulnerability allows an attacker to access a locally or network-private java-sdk MCP server via a victims browser that is either local, o...
7.6CVSS5.9AI score0.002EPSS
SaveExploits0References3
Downloads Resources over HTTP
Overview Affected versions of xd-testing insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution o...
9.3CVSS6.2AI score0.01752EPSS
SaveExploits0Affected Software1
20