Total
5 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-78573 | 1 Ibm | 1 Contextforge | 2026-09-16 | N/A | 9.8 CRITICAL |
| IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials. | |||||
| CVE-2026-18905 | 1 Ibm | 1 Contextforge | 2026-09-15 | N/A | 7.7 HIGH |
| IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive information due to a DNS rebinding vulnerability during tool invocation. | |||||
| CVE-2026-77822 | 1 Ibm | 1 Contextforge | 2026-09-15 | N/A | 8.2 HIGH |
| IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding. | |||||
| CVE-2026-18486 | 1 Ibm | 1 Contextforge | 2026-09-15 | N/A | 8.8 HIGH |
| IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters. | |||||
| CVE-2026-18489 | 1 Ibm | 1 Contextforge | 2026-09-15 | N/A | 7.4 HIGH |
| IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session. | |||||