CVE-2026-44429

CVE-2026-44429 pertains to the MCP Registry. Before 1.7.7, the public catalogue UI at GET / is vulnerable to stored XSS via the server.websiteUrl field in published server.json. Server-side validation (validateWebsiteURL) only checks parsing, absoluteness, and https scheme; it does not reject quo...

Tableau has multiple vulnerabilities

Tableau Server is enterprise intelligence software that provides browser-based analytics that anyone can learn and use. Tableau Server has a sensitive information disclosure and privilege bypass vulnerability that can be exploited by remote attackers to target administrative user actions, obtain...