MCP servers & tools
Filed as: MCP Atlassian, mcp-atlassian, pgEdge Postgres MCP Server, dbt-mcp, mcp-searxng, ToolHive, @zereight/mcp-gitlab, FrontMCP, mcp-server-kubernetes, Meta Ads MCP, @modelcontextprotocol/server-filesystem, mcp-server-git, and 41 more
Newest record 2026-11-12 · 107 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 1
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
- closedMCP servers & tools Postmark MCP Server Package Hijacked for Email Exfiltration
Exploited · since Sep 2025 (approx.)
AI
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 107
- closed3.1MCP servers & tools CVE-2026-126198: pgEdge Postgres MCP Server bypasses write confirmation for custom tools
Disclosed · Patched · since 12 Nov 2026 · CVE-2026-126198
AI - closed8.1MCP servers & tools CVE-2026-126196: pgEdge Postgres MCP Server permits multi‑statement writes on read‑only connections
Disclosed · Patched · since 12 Nov 2026 · CVE-2026-126196
AI - closed8.8MCP servers & tools CVE-2026-126197: pgEdge Postgres MCP Server vulnerable to JSON‑based SQL injection
Disclosed · Patched · since 12 Nov 2026 · CVE-2026-126197
AI - closed6.8MCP servers & tools CVE-2026-126199: pgEdge Postgres MCP Server allows SQL queries without write confirmation
Disclosed · Patched · since 12 Nov 2026 · CVE-2026-126199
AI - closed6.5MCP servers & tools CVE-2026-125321: pgEdge Postgres MCP Server rate‑limit bypass via X‑Forwarded‑For
Disclosed · Patched · since 10 Nov 2026 · CVE-2026-125321
AI - closed5.3MCP servers & tools CVE-2026-125320: pgEdge Postgres MCP Server vulnerable to DNS rebinding via Origin header
Disclosed · Patched · since 10 Nov 2026 · CVE-2026-125320
AI - closed6.5MCP servers & tools CVE-2026-125322: pgEdge Postgres MCP Server allows subquery inference via count_rows tool
Disclosed · Patched · since 10 Nov 2026 · CVE-2026-125322
AI - closed7.5MCP servers & tools CVE-2026-62264: PDF Reader MCP Authentication Bypass Flaw
Disclosed · Patched · since 30 Oct 2026 · CVE-2026-62264
AI - closed5.9MCP servers & tools CVE-2026-57207: NetBox MCP Server lacks HTTP endpoint authentication
Disclosed · since 23 Oct 2026 · CVE-2026-57207
AI - closed7.5MCP servers & tools CVE-2026-114123: D365 F&O MCP Server authentication bypass vulnerability
Disclosed · since 21 Oct 2026 · CVE-2026-114123
AI - closed9.3MCP servers & tools x64dbg-MCP Server exposes unauthenticated debugging tools over HTTP
Disclosed · since 9 Oct 2026 · CVE-2026-107824
AI - closed5.3MCP servers & tools x64dbg-MCP Server integer overflow leads to process crash
Disclosed · since 9 Oct 2026 · CVE-2026-107820
AI - closed5.4MCP servers & tools CVE-2026-77272: Cross-site scripting in MCP Atlassian OAuth setup
Disclosed · since 22 Sep 2026 · CVE-2026-77272
AI - closed7.7MCP servers & tools CVE-2026-77258: Arbitrary file upload flaw in MCP Atlassian
Disclosed · since 22 Sep 2026 · CVE-2026-77258
AI - closed7.1MCP servers & tools CVE-2026-77261: SSRF vulnerability in MCP Atlassian server
Disclosed · since 22 Sep 2026 · CVE-2026-77261
AI - closed8.3MCP servers & tools CVE-2026-77271: Arbitrary file write and code execution in MCP Atlassian
Disclosed · since 22 Sep 2026 · CVE-2026-77271
AI - closed8.8MCP servers & tools CVE-2026-77274: Backslash authority confusion SSRF in MCP Atlassian
Disclosed · since 22 Sep 2026 · CVE-2026-77274
AI - closed8.3MCP servers & tools CVE-2026-77267: Header-based SSRF vulnerability in MCP Atlassian server
Disclosed · since 22 Sep 2026 · CVE-2026-77267
AI - closed6.1MCP servers & tools CVE-2026-77250: Insecure plaintext token storage in MCP Atlassian server
Disclosed · since 22 Sep 2026 · CVE-2026-77250
AI - closed7.5MCP servers & tools CVE-2026-77242: DNS rebinding vulnerability in MCP Atlassian server
Disclosed · since 22 Sep 2026 · CVE-2026-77242
AI - closed6.5MCP servers & tools CVE-2026-77252: Access control restriction bypass in MCP Atlassian filter inputs
Disclosed · since 22 Sep 2026 · CVE-2026-77252
AI - closed7.1MCP servers & tools CVE-2026-77253: Filesystem boundary traversal in MCP Atlassian attachment upload
Disclosed · since 22 Sep 2026 · CVE-2026-77253
AI - closed9.1MCP servers & tools CVE-2026-77254: Authentication boundary bypass in MCP Atlassian HTTP endpoint
Disclosed · since 22 Sep 2026 · CVE-2026-77254
AI - closed5.3MCP servers & tools CVE-2026-77249: SSRF vulnerability in MCP Atlassian server user lookup
Disclosed · since 22 Sep 2026 · CVE-2026-77249
AI - closed6.5MCP servers & tools CVE-2026-77270: Arbitrary file disclosure vulnerability in MCP Atlassian server
Disclosed · since 22 Sep 2026 · CVE-2026-77270
AI - closed6.5MCP servers & tools CVE-2026-77269: MCP Atlassian incomplete patch allows source path traversal
Disclosed · since 22 Sep 2026 · CVE-2026-77269
AI - closed8.3MCP servers & tools CVE-2026-77257: MCP Atlassian remote local file read and upload vulnerability
Disclosed · since 22 Sep 2026 · CVE-2026-77257
AI - closed8.3MCP servers & tools CVE-2026-77251: MCP Atlassian access control bypass in search and board APIs
Disclosed · since 22 Sep 2026 · CVE-2026-77251
AI - closed7.7MCP servers & tools CVE-2026-77259: MCP Atlassian local file disclosure via attachment upload
Disclosed · since 22 Sep 2026 · CVE-2026-77259
AI - closed7.4MCP servers & tools CVE-2026-77246: MCP Atlassian allows unauthorized transport and request manipulation
Disclosed · since 22 Sep 2026 · CVE-2026-77246
AI - closed8.3MCP servers & tools CVE-2026-77260: MCP Atlassian accepts unconstrained file paths in upload handler
Disclosed · since 22 Sep 2026 · CVE-2026-77260
AI - closed6.5MCP servers & tools CVE-2026-77266: MCP Atlassian allows absolute paths and traversal during upload
Disclosed · since 22 Sep 2026 · CVE-2026-77266
AI - closed8.6MCP servers & tools CVE-2026-77262: MCP Atlassian suffers from path traversal in file uploads
Disclosed · since 22 Sep 2026 · CVE-2026-77262
AI - closed8.8MCP servers & tools CVE-2026-77243: MCP Atlassian fails to recheck tool restrictions on dispatch
Disclosed · since 22 Sep 2026 · CVE-2026-77243
AI - closed8.3MCP servers & tools CVE-2026-77256: MCP Atlassian stores plaintext OAuth tokens insecurely
Disclosed · since 22 Sep 2026 · CVE-2026-77256
AI - closed8.6MCP servers & tools CVE-2026-77248: Unauthenticated file read and exfiltration in MCP Atlassian
Disclosed · since 22 Sep 2026 · CVE-2026-77248
AI - closed10.0MCP servers & tools CVE-2026-77244: Unauthenticated HTTP access in MCP Atlassian server
Disclosed · since 22 Sep 2026 · CVE-2026-77244
AI - closed8.3MCP servers & tools CVE-2026-77247: Arbitrary file upload vulnerability in MCP Atlassian server
Disclosed · since 22 Sep 2026 · CVE-2026-77247
AI - closed5.9MCP servers & tools CVE-2026-77265: DNS rebinding SSRF vulnerability in MCP Atlassian server
Disclosed · since 22 Sep 2026 · CVE-2026-77265
AI - closed5.5MCP servers & tools CVE-2026-77268: Insecure file permissions in MCP Atlassian server
Disclosed · since 22 Sep 2026 · CVE-2026-77268
AI - closed8.6MCP servers & tools CVE-2026-77255: MCP Atlassian Arbitrary File Read and Exfiltration Vulnerability
Disclosed · since 22 Sep 2026 · CVE-2026-77255
AI - closed8.8MCP servers & tools CVE-2026-58197: Network isolation flaw in ToolHive MCP server management
Disclosed · since 18 Sep 2026 · CVE-2026-58197
AI - closed7.5MCP servers & tools CVE-2026-50125: Unauthenticated endpoint vulnerability in MKP MCP server
Disclosed · since 17 Sep 2026 · CVE-2026-50125
AI - closed9.6MCP servers & tools CVE-2026-61568: @zereight/mcp-gitlab lacks host allowlist protection
Disclosed · since 15 Sep 2026 · CVE-2026-61568
AI - closed7.5MCP servers & tools CVE-2026-58483: mcp-searxng memory exhaustion vulnerability
Disclosed · since 15 Sep 2026 · CVE-2026-58483
AI - closed10.0MCP servers & tools CVE-2026-59971: MySQL MCP Server lacks authentication and DNS protection
Disclosed · since 15 Sep 2026 · CVE-2026-59971
AI - closed7.1MCP servers & tools CVE-2026-58485: mcp-searxng susceptible to server-side request forgery
Disclosed · since 15 Sep 2026 · CVE-2026-58485
AI - closed7.4MCP servers & tools CVE-2026-54547: Meta Ads MCP has HTTP authentication bypass flaw
Disclosed · since 15 Sep 2026 · CVE-2026-54547
AI - closed6.9MCP servers & tools CVE-2026-57441: MCPVault contains path filter bypass vulnerability
Disclosed · since 15 Sep 2026 · CVE-2026-57441
AI - closed8.5MCP servers & tools CVE-2026-59973: FrontMCP vulnerable to SSRF in OpenAPI spec loading
Disclosed · since 15 Sep 2026 · CVE-2026-59973
AI - closed9.6MCP servers & tools CVE-2026-61559: Dynamic API URL redirection flaw in mcp-gitlab
Disclosed · since 15 Sep 2026 · CVE-2026-61559
AI - closed6.9MCP servers & tools CVE-2026-57442: Path restriction bypass vulnerability in MCPVault
Disclosed · since 15 Sep 2026 · CVE-2026-57442
AI - closed6.3MCP servers & tools CVE-2026-54689: URL policy bypass vulnerability in mcp-searxng
Disclosed · since 15 Sep 2026 · CVE-2026-54689
AI - closed9.8MCP servers & tools CVE-2026-61560: Authentication bypass and arbitrary file read in mcp-gitlab
Disclosed · since 15 Sep 2026 · CVE-2026-61560
AI - closed6.5MCP servers & tools CVE-2026-54688: SSRF vulnerability in mcp-searxng MCP server
Disclosed · since 15 Sep 2026 · CVE-2026-54688
AI - closed8.3MCP servers & tools CVE-2026-54549: Meta Ads MCP Unvalidated Image URL Vulnerability
Disclosed · since 15 Sep 2026 · CVE-2026-54549
AI - closed2.9MCP servers & tools CVE-2026-54450: ToolHive NAT64 IP Validation Vulnerability
Disclosed · since 15 Sep 2026 · CVE-2026-54450
AI - closed4.7MCP servers & tools CVE-2026-58196: ToolHive Authentication Discovery Vulnerability
Disclosed · since 15 Sep 2026 · CVE-2026-58196
AI - closed7.7MCP servers & tools CVE-2026-53957: Contentful MCP Server Unsafe Network Options Vulnerability
Disclosed · since 15 Sep 2026 · CVE-2026-53957
AI - closed7.7MCP servers & tools CVE-2026-73496: MCP Atlassian vulnerable to arbitrary file upload and path traversal
Disclosed · since 14 Sep 2026 · CVE-2026-73496
AI - closed6.8MCP servers & tools CVE-2026-55837: dbt-mcp OAuth helper exposes tokens without authentication
Disclosed · since 14 Sep 2026 · CVE-2026-55837
AI - closed6.5MCP servers & tools CVE-2026-73497: MCP Atlassian server vulnerable to SSRF via DNS rebinding
Disclosed · since 14 Sep 2026 · CVE-2026-73497
AI - closed9.1MCP servers & tools CVE-2026-55640: Nextcloud MCP Server unauthenticated webhook vulnerability
Disclosed · since 25 Aug 2026 · CVE-2026-55640
AI - closed7.3MCP servers & tools CVE-2026-19753: Server-side request forgery in mcp-rdf-explorer MCP Server
Disclosed · since 13 Aug 2026 · CVE-2026-19753
AI - closed7.7MCP servers & tools CVE-2026-73498: Path traversal flaw in MCP Atlassian server allows arbitrary file read
Disclosed · since 12 Aug 2026 · CVE-2026-73498
AI - closed5.3MCP servers & tools CVE-2026-19334: Ollama-mcp Local Command Injection Flaw
Disclosed · since 9 Aug 2026 · CVE-2026-19334
AI - closed9.1MCP servers & tools CVE-2026-48039: Meta Ads MCP authentication bypass in middleware
Disclosed · since 7 Aug 2026 · CVE-2026-48039
AI - closed9.3MCP servers & tools CVE-2026-67531: FrontMCP Sandbox Escape Leading to RCE
Disclosed · since 6 Aug 2026 · CVE-2026-67531
AI - closed6.6MCP servers & tools CVE-2026-44192: Path Traversal Flaw in Ansible Lightspeed MCP Server
Disclosed · since 22 Jul 2026 · CVE-2026-44192
AI - closed7.7MCP servers & tools CVE-2026-46555: WhatsApp MCP Server Unauthenticated API Vulnerability
Disclosed · since 20 Jul 2026 · CVE-2026-46555
AI - closed6.3MCP servers & tools CVE-2026-44968: dbt-mcp vulnerability allows flag injection in subprocess
Disclosed · since 16 Jul 2026 · CVE-2026-44968
AI - closed2.5MCP servers & tools CVE-2026-44969: dbt-mcp logs sensitive tool arguments in plaintext
Disclosed · since 16 Jul 2026 · CVE-2026-44969
AI - closed3.1MCP servers & tools CVE-2026-44970: dbt-mcp telemeters unredacted tool call arguments
Disclosed · since 16 Jul 2026 · CVE-2026-44970
AI - closed9.2MCP servers & tools CVE-2026-15643: AWS HealthLake MCP Server SSRF Credential Exfiltration
Disclosed · since 14 Jul 2026 · CVE-2026-15643
AI - closed7.4MCP servers & tools Kong Konnect MCP Server Indirect Prompt Injection Vulnerability
Disclosed · since 3 Jul 2026 · CVE-2026-13341
AI - closed10.0MCP servers & tools CVE-2026-49257: mcp-pinot exposes unauthenticated HTTP MCP server by default
Disclosed · since 18 Jun 2026 · CVE-2026-49257
AI - closed8.8MCP servers & tools CVE-2026-46519: Access control bypass vulnerability in mcp-server-kubernetes
Disclosed · since 11 Jun 2026 · CVE-2026-46519
AI - closed6.1MCP servers & tools CVE-2026-47250: mcp-server-kubernetes Privilege Escalation Vulnerability
Disclosed · since 11 Jun 2026 · CVE-2026-47250
AI - closed7.2MCP servers & tools Spring AI mcp-security Lacks Mandatory SSRF Mitigations
Disclosed · since 29 May 2026 · CVE-2026-45609
AI - closed9.4MCP servers & tools CVE-2026-40576: Path traversal in excel-mcp-server
Disclosed · since 21 Apr 2026 · CVE-2026-40576
AI - closed8.7MCP servers & tools CVE-2026-39313: Denial of service vulnerability in mcp-framework HTTP transport
Disclosed · since 16 Apr 2026 · CVE-2026-39313
AI - closed8.3MCP servers & tools CVE-2026-39884: Argument Injection in Kubernetes MCP Server Port Forward Tool
Disclosed · since 15 Apr 2026 · CVE-2026-39884
AI - closed8.1MCP servers & tools Apollo MCP Server Host Header Validation Vulnerability
Disclosed · since 9 Apr 2026 · CVE-2026-35577
AI - closed7.5MCP servers & tools FrontMCP SSRF Vulnerability in OpenAPI Specification Processing
Disclosed · since 8 Apr 2026 · CVE-2026-39885
AI - closed6.3MCP servers & tools CVE-2026-5470: SSRF Vulnerability in Google-Research-MCP Content Extractor
Disclosed · since 3 Apr 2026 · CVE-2026-5470
AI - closed8.3MCP servers & tools CVE-2026-33980: Azure Data Explorer MCP Server KQL injection vulnerability
Disclosed · since 27 Mar 2026 · CVE-2026-33980
AI - closed8.2MCP servers & tools MCP Atlassian unauthenticated server-side request forgery vulnerability
Disclosed · since 10 Mar 2026 · CVE-2026-27826
AI - closed9.0MCP servers & tools MCP Atlassian directory traversal vulnerability allows arbitrary file write
Disclosed · since 10 Mar 2026 · CVE-2026-27825
AI - closed6.4MCP servers & tools CVE-2026-27735: Path traversal vulnerability in Model Context Protocol git server
Disclosed · since 26 Feb 2026 · CVE-2026-27735
AI - closed8.7MCP servers & tools CVE-2026-25650: MCP Salesforce Connector Auth Token Disclosure Vulnerability
Disclosed · since 6 Feb 2026 · CVE-2026-25650
AI - closed7.8MCP servers & tools CVE-2026-25546: Godot MCP Command Injection Vulnerability
Disclosed · since 4 Feb 2026 · CVE-2026-25546
AI - closed9.8MCP servers & tools CVE-2025-15063: Ollama MCP Server Command Injection RCE Vulnerability
Disclosed · since 23 Jan 2026 · CVE-2025-15063
AI - closed9.6MCP servers & tools CVE-2025-66580: Dive MCP Host Application RCE Vulnerability
Disclosed · since 19 Dec 2025 · CVE-2025-66580
AI - closed6.5MCP servers & tools CVE-2025-68143: Arbitrary path creation vulnerability in mcp-server-git
Disclosed · since 17 Dec 2025 · CVE-2025-68143
AI - closed5.4MCP servers & tools Splunk MCP Server Control Bypass Vulnerability CVE-2025-20381
Disclosed · since 3 Dec 2025 · CVE-2025-20381
AI - closed9.8MCP servers & tools MCP Watch Command Injection Vulnerability CVE-2025-66401
Disclosed · since 1 Dec 2025 · CVE-2025-66401
AI - closed6.9MCP servers & tools CVE-2025-59155: hackmd-mcp server-side request forgery vulnerability
Disclosed · since 15 Sep 2025 · CVE-2025-59155
AI - closed7.5MCP servers & tools CVE-2025-58358: Markdownify MCP server command injection vulnerability
Disclosed · since 4 Sep 2025 · CVE-2025-58358
AI - closed7.5MCP servers & tools Command Injection in Lara Translate MCP Server
Disclosed · since 21 Jul 2025 · CVE-2025-53832
AI - closed8.9MCP servers & tools Command Injection in GitHub Kanban MCP Server
Disclosed · since 14 Jul 2025 · CVE-2025-53818
AI - closed9.6MCP servers & tools CVE-2025-6514: mcp-remote vulnerable to OS command injection
Disclosed · since 9 Jul 2025 · CVE-2025-6514
AI - closed7.5MCP servers & tools CVE-2025-53372: Command injection vulnerability in node-code-sandbox-mcp
Disclosed · since 8 Jul 2025 · CVE-2025-53372
AI - closed9.3MCP servers & tools CVE-2025-34072: Data exfiltration vulnerability in Anthropic Slack MCP Server
Disclosed · since 2 Jul 2025 · CVE-2025-34072
AI - closed7.3MCP servers & tools CVE-2025-53109: Model Context Protocol filesystem server symlink handling bypass
Disclosed · since 1 Jul 2025 · updated 2 Jul 2025 · CVE-2025-53109
AI - closed7.3MCP servers & tools CVE-2025-53110: Model Context Protocol filesystem server path validation bypass
Disclosed · since 1 Jul 2025 · updated 2 Jul 2025 · CVE-2025-53110
AI - closed6.0MCP servers & tools CVE-2025-52573: iOS Simulator MCP Server Command Injection Vulnerability
Disclosed · since 26 Jun 2025 · CVE-2025-52573
AI - closed2.4MCP servers & tools CVE-2025-47274: Insecure Secret Storage in ToolHive MCP Server Utility
Disclosed · since 12 May 2025 · CVE-2025-47274
AI
Other incidents: research and unexploited reports · 2
- liveMCP SDKs MCP Tool Poisoning in Agentic AI Frameworks Across Multiple Frameworks
Research · since 3 Nov 2026 · updated 5 Nov 2026
AI - liveMCP servers & tools AI coding agents install unpatched archived MCP servers
Research · since 3 Nov 2026
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.