Unverified50% confidenceFactExact time
Past vulnerability cases: mcp-remote once passed the authorization URL provided by the server directly to the system shell (CVE-2025-6514, CVSS 9.6); the early MCP Inspector ran an unauthenticated proxy that could execute commands (CVE-2025-49596).
1
Sources
50%
Confidence
Long-term
Relevance
10/18/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedCVE-2026-88771 is a CVSS 9.5 pre-authentication command injection vulnerability affecting all NetScaler ADC and Gateway deployments, including default configurations.70% similarUnverifiedDisclosed MCP vulnerabilities include: argocd-mcp shipped with no authentication at all, Rill's OAuth flow allowed attackers to skip the user consent step, and prompt injection existed in the tool descriptions of multiple MCP servers.69% similarUnverifiedCritics point out that an MCP Server with file system write permissions, once exploited by malicious tools, would present an attack surface harder to audit than traditional API integrations66% similarUnverifiedHistorical RouterOS vulnerabilities include CVE-2018-14847, a Winbox protocol vulnerability (allowing unauthorized users to read arbitrary files), and CVE-2019-3976, an SMB stack overflow (enabling remote code execution).66% similarUnverifiedSecurity researchers have discovered the first malicious MCP server found being used in the wild.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1063082API
curl https://kongchang.com/api/v1/knowledge/claims/1063082MCP
get_claim(id=1063082)