Lucene search
+L

17 matches found

NVD
NVD
•added 2026/08/18 8:16 a.m.•16 views

CVE-2026-34884

SSRF via setskywalkingurl Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

9.8CVSS0.0069EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/18 7:26 a.m.•11 views

EUVD-2026-60572

SSRF via setskywalkingurl Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

5.3AI score0.0069EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/18 7:26 a.m.•79 views

CVE-2026-34884

Apache SkyWalking MCP version 0.1.0 is vulnerable to Server-Side Request Forgery (SSRF) and GraphQL expression injection . The SSRF vulnerability specifically occurs through the set skywalking url tool within the MCP Server. To remediate these issues, users are recommended to upgrade to version 0...

5.8AI score0.0069EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/08/18 7:26 a.m.•56 views

CVE-2026-34884 Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server

SSRF via setskywalkingurl Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

0.0069EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/18 7:26 a.m.•47 views

CVE-2026-34884

SSRF via setskywalkingurl Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

5.3AI score0.0069EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•2 views

CVE-2026-34884: Server-Side Request Forgery (SSRF)

SSRF via setskywalkingurl Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

9.8CVSS5.8AI score0.0069EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/07/30 4:56 p.m.•13 views

SUSE CVE-2026-34476

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

7.1CVSS8.1AI score0.0054EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:50 p.m.•24 views

CVE-2026-34476

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

7.1CVSS8.2AI score0.0054EPSS
SaveExploits0References1
Veracode
Veracode
•added 2026/05/16 5:24 a.m.•20 views

Server-Side Request Forgery (SSRF)

github.com/apache/skywalking-mcp is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper validation of the SW-URL header, which allows an attacker to supply arbitrary URLs and force the server to send requests to unintended internal or external resources...

7.1CVSS8.2AI score0.0054EPSS
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/04/13 3:31 p.m.•7 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the SW-URL header in the MCP server. An attacker can access internal resources and potentially exfiltrate sensitive information by sending crafted requests that are processed by the server. Remediati...

7.1CVSS8.1AI score0.0054EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/04/13 3:31 p.m.•24 views

Apache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

7.1CVSS8.1AI score0.0054EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2026/04/13 1:16 p.m.•15 views

CVE-2026-34476

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

7.1CVSS0.0054EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/13 1:01 p.m.•80 views

CVE-2026-34476

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

7.1CVSS8.1AI score0.0054EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/13 1:01 p.m.•5 views

CVE-2026-34476 Apache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

8.1AI score0.0054EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/13 1:01 p.m.•42 views

CVE-2026-34476 Apache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

0.0054EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/13 12:00 a.m.•18 views

Apache SkyWalking MCP 安全漏洞

Apache SkyWalking MCP is a distributed system-oriented observability data management and processing component developed by the Apache Foundation. Version 0.1.0 of Apache SkyWalking MCP contains a security vulnerability, which stems from server-side request forgery in the SW-URL header...

7.1CVSS8.1AI score0.0054EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/13 12:00 a.m.•3 views

CVE-2026-34476: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue...

7.1CVSS5.8AI score0.0054EPSS
SaveExploits0References2
Rows per page
Query Builder