CVE Intelligence

Vulnerabilidades do Ibm ContextForge MCP Gateway (`mcp-contextforge-gateway`)

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ibm ContextForge MCP Gateway (`mcp-contextforge-gateway`): 1 registro(s), com versões afetadas e correções.

CVE-2026-18905 Alta · 7.7 CWE-918 04/09/2026
IBM ContextForge MCP Gateway is affected by server-side request forgery via DNS TOCTOU at tool invocation
IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive information due to a DNS rebinding vulnerability during tool invocation.