All 4 CVE vulnerabilities found in mcp-searxng, with AI-generated Chinese analysis, references, and POCs.
Vendor: ihor-sokoliuk
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-58483 | mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read` CWE-400 | 7.5 | High | 2026-09-15 |
| CVE-2026-58485 | mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read` CWE-918 | 7.1 | High | 2026-09-15 |
| CVE-2026-54688 | mcp-searxng: SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off) CWE-918 | 6.5 | Medium | 2026-09-15 |
| CVE-2026-54689 | mcp-searxng hardened-mode SSRF bypasses permit internal URL access CWE-200 | 6.3 | Medium | 2026-09-15 |
All 4 known CVE vulnerabilities affecting mcp-searxng with full Chinese analysis, references, and POCs where available.