CVE-2026-110178

IBM ContextForge MCP Gateway is affected by an improper access control vulnerability in configuration import

IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to improper access control in the bulk import path. A remote authenticated attacker holding a team-scoped `admin.import` permission can overwrite the endpoint URL, request headers, and authentication credentials of public tools, resources, and prompts owned by other tenants by sending a crafted POST request to `/v1/import` with `conflict_strategy=update`, redirecting subsequent AI gateway invocations to an attacker-controlled host.

CVSS 3.1 · 4.1 Medium EPSS n/a KEV · Not listed

Vendors

Ibm

Products

Contextforge Mcp Gateway

CVE-2026-110199

IBM ContextForge MCP Gateway is affected by a DOM-based cross-site scripting

IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

CVSS 3.1 · 4.8 Medium EPSS n/a KEV · Not listed

Vendors

Ibm

Products

Contextforge Mcp Gateway

CVE-2026-110279

IBM ContextForge MCP Gateway is affected by an improper authentication vulnerability

IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 is vulnerable to improper credential handling because the X-Upstream-Authorization request header can override the gateway-managed upstream credential for OAuth (authorization_code and client_credentials), bearer and basic authenticated gateways, which could allow an authenticated user to cause upstream requests to be made with a different credential and bypass per-user permission and audit attribution.

CVSS 3.1 · 8.1 High EPSS n/a KEV · Not listed

Vendors

Ibm

Products

Contextforge Mcp Gateway

CVE-2026-94407

IBM ContextForge MCP Gateway is affected by a regular expression denial of service

IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is potentially vulnerable to denial of service due to uncontrolled regular expression complexity (CWE-400 / ReDoS). An authenticated user with tool-registration privileges can embed catastrophically backtracking regex patterns in a tool's JSON Schema `pattern` field; when ContextForge validates arguments against that schema, the validation call may consume unbounded CPU, potentially degrading gateway availability.

CVSS 3.1 · 6.5 Medium EPSS n/a KEV · Not listed

Vendors

Ibm

Products

Contextforge Mcp Gateway

CVE-2026-110189

IBM ContextForge MCP Gateway is affected by a denial of service due to an incomplete list of disallowed jq inputs

IBM ContextForge MCP Gateway 1.0.8 through 1.0.11, and v1.1.0 is vulnerable to denial of service due to an incomplete denylist in the jq filter guard module (CWE-184). An authenticated remote attacker can supply a crafted `jsonpath_filter` value containing `halt`, `halt_error`, or unbounded-loop built-ins that bypass the safety check, causing gateway worker process termination or sustained resource exhaustion.

CVSS 3.1 · 6.5 Medium EPSS n/a KEV · Not listed

Vendors

Ibm

Products

Contextforge Mcp Gateway

CVE-2026-110195

IBM ContextForge MCP Gateway is affected by an authorization bypass vulnerability

IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow an authenticated caller to bypass upstream credential-level authorization policies due to an insufficiently specific cache key in the RFC 8693 token exchange cache, enabling reuse of cached upstream bearer tokens across different credentials belonging to the same user.

CVSS 3.1 · 5.4 Medium EPSS n/a KEV · Not listed

Vendors

Ibm

Products

Contextforge Mcp Gateway

CVE-2026-124021

Control Web Panel < 1.30.6 Authorization Bypass via oauth_authorization_codes

Control Web Panel (CWP) before webpanel_version 1.30.6 contains an authorization bypass vulnerability in the validate() function of api/v1/index.php that allows attackers holding a password-recovery token and a predictable legacy signature to obtain valid remote-API authorization without a proper API key. Attackers can exploit this flaw via the POST /cronjobsusers/ endpoint to add arbitrary cron commands and achieve command execution as the affected hosting account, and can also abuse the same token to access global account-list and account-detail routes exposing usernames, contact emails, and password hashes.

CVSS 4.0 · 9.2 Critical EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2026-110278

IBM ContextForge MCP Gateway is affected by an information exposure vulnerability

IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 could allow an attacker to replay identity propagation claims signatures or expose sensitive user identity information to third-party MCP servers due to static signature payloads and missing per-gateway configuration checks during tool invocation.

CVSS 3.1 · 7.4 High EPSS n/a KEV · Not listed

Vendors

Ibm

Products

Contextforge Mcp Gateway

CVE-2026-124020

Control Web Panel < 1.30.6 Host Header Password Reset Poisoning

Control Web Panel (CWP) before webpanel_version 1.30.6 contains a host header injection vulnerability that allows unauthenticated attackers to manipulate the password-recovery reset URL by injecting the HTTP Host header into the /v1/lostpass/ route's token generation process. Attackers can lure an automated mail-security scanner into visiting the poisoned reset link to exfiltrate the live recovery token, replay it at /login/index.php?acc=newpass to set a new password, and subsequently abuse the File Manager and Crontab modules to achieve command execution as the targeted hosting account.

CVSS 4.0 · 9.2 Critical EPSS n/a KEV · Not listed

Vendors

—

Products

—

CVE-2026-128886

Dbus: server accept watch can be stalled by blocking nonce-tcp accept_with_noncefile path

A flaw was found in dbus when configured with the nonce-tcp transport. An unauthenticated attacker able to connect to an exposed listener can cause a Denial of Service (DoS) by opening a connection and withholding the expected authentication token. Because the server processes this verification without enforcing a timeout, the stalled connection blocks the accept process and prevents legitimate clients from establishing new connections.

CVSS 3.1 · 6.2 Medium EPSS n/a KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux

CVE-2026-97683

IBM Cyber Fraud includes components with multiple known vulnerabilities

IBM Cyber Fraud 1.0.0 through 1.1.0 could allow a local attacker to bypass security restrictions due to a missing or misconfigured security context.

CVSS 3.1 · 2.5 Low EPSS n/a KEV · Not listed

Vendors

Ibm

Products

Cyber Fraud

CVE-2026-9870

IBM Cyber Fraud includes components with multiple known vulnerabilities

IBM Cyber Fraud 1.0.0 through 1.1.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

CVSS 3.1 · 6.1 Medium EPSS n/a KEV · Not listed

Vendors

Ibm

Products

Cyber Fraud

CVE-2026-108290

IBM Cyber Fraud includes components with multiple known vulnerabilities

IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an attacker with local access to a container to extract sensitive information due to unrestrictive network policies.

CVSS 3.1 · 4 Medium EPSS n/a KEV · Not listed

Vendors

Ibm

Products

Cyber Fraud

CVE-2026-9821

IBM Cyber Fraud includes components with multiple known vulnerabilities

IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.

CVSS 3.1 · 5.3 Medium EPSS n/a KEV · Not listed

Vendors

Ibm

Products

Cyber Fraud

CVE-2026-57013

Local Privilege Escalation via Secure Coprocessor Reset Release

In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall registers due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

—

Products

—

CVE-2026-58702

Permission Bypass in Android TimerAgent Leading to Local Information Disclosure

In createIntent of TimerAgent.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS 3.1 · 4.0 Medium EPSS < 1% KEV · Not listed

Vendors

—

Products

—

CVE-2026-58705

Android gscan Heap Overflow Enables Remote Privilege Escalation

In handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

—

Products

—

CVE-2026-58757

Heap Buffer Overflow in Android Media Framework Codec Enables Local Privilege Escalation

In mfc_alloc_enc_roi_buffer of mfc_buf.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

—

Products

—

CVE-2026-58762

Memory Corruption in ac_get_prot_config Enables Local Information Disclosure

In ac_get_prot_config of plat_trusty.c, there is a possible memory corruption due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

CVSS 3.1 · 2.3 Low EPSS < 1% KEV · Not listed

Vendors

—

Products

—

CVE-2026-58769

Android Local Information Disclosure via Out-of-Bounds Read

In multiple locations, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

CVSS 3.1 · 2.3 Low EPSS < 1% KEV · Not listed

Vendors

—

Products

—