Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-77822 1 Ibm 1 Contextforge-mcp-gateway 2026-09-04 8.2 High
IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.
CVE-2026-18905 1 Ibm 1 Contextforge-mcp-gateway 2026-09-04 7.7 High
IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive information due to a DNS rebinding vulnerability during tool invocation.
CVE-2026-18486 1 Ibm 1 Contextforge-mcp-gateway 2026-09-04 8.8 High
IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters.