All 2 CVE vulnerabilities found in excel-mcp-server, with AI-generated Chinese analysis, references, and POCs.
Vendor: haris-musa
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-85661 | excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio mode CWE-22 | 9.8 | Critical | 2026-09-04 |
| CVE-2026-40576 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in excel-mcp-server CWE-22 | 9.4 | Critical | 2026-04-21 |
All 2 known CVE vulnerabilities affecting excel-mcp-server with full Chinese analysis, references, and POCs where available.