Unverified50% confidenceEventExact time
Previously, OX Security disclosed CVE-2025-69443 in the Archon OS product line (0.1.0 to 0.3.11), where a backend port with neither CORS protection nor authentication could be accessed by a malicious webpage.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedBefore the fix, the vulnerability could be mitigated by setting the environment variable HOST=127.0.0.1 to bind Archon to the loopback address.65% similarUnverifiedIndependent security researcher Syed Anas Mohi Uddin discovered the same security flaw in MCP servers belonging to Google, JPMorgan Chase, and three other organizations: a tool that fetches a given URL without verifying where the address actually points.60% similarUnverifiedHistorical RouterOS vulnerabilities include CVE-2018-14847, a Winbox protocol vulnerability (allowing unauthorized users to read arbitrary files), and CVE-2019-3976, an SMB stack overflow (enabling remote code execution).57% similarUnverifiedA security.txt file alone cannot prove that a platform is absolutely secure; true security capability is reflected in a defense-in-depth system encompassing vulnerability response speed, model scanning mechanisms, access control, and supply chain verification.56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1043102API
curl https://kongchang.com/api/v1/knowledge/claims/1043102MCP
get_claim(id=1043102)