All 6 CVE vulnerabilities found in ContextForge MCP Gateway, with AI-generated Chinese analysis, references, and POCs.
Vendor: IBM
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-8355 | IBM ContextForge MCP Gateway is affected by server-side request forgery CWE-918 | - | - | 2026-10-19 |
| CVE-2026-77825 | IBM ContextForge MCP Gateway is affected by path traversal CWE-22 | 4.9 | Medium | 2026-09-24 |
| CVE-2026-11918 | IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structures CWE-184 | 5.4 | Medium | 2026-09-15 |
| CVE-2026-78573 | IBM ContextForge MCP Gateway is affected by use of default credentials CWE-1392 | 9.8 | Critical | 2026-09-10 |
| CVE-2026-18486 | IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution CWE-200 | 8.8 | High | 2026-09-04 |
| CVE-2026-77822 | IBM ContextForge MCP Gateway is affected by server-side request forgery (DNS rebinding) via the A2A agent invocation endpoint CWE-918 | 8.2 | High | 2026-09-04 |
All 6 known CVE vulnerabilities affecting ContextForge MCP Gateway with full Chinese analysis, references, and POCs where available.