MCP servers & tools

Patch now: confirmed exploitation or KEV · 1

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

1. 2026-03-31
   Postmark MCP Server Package Hijacked for Email Exfiltration

   3 Exploitednpm · supply-chain · mcp · data-exfiltration

   record AIR-2026-0346MITRE ATLAS ↗

Disclosed CVEs, no confirmed exploitation · 97

1. 2026-10-09
   CVE-2026-107824

   x64dbg-MCP Server exposes unauthenticated debugging tools over HTTP

   2 Disclosedunauthenticated-access · mcp

   record AIR-2026-0288NVD ↗
2. 2026-10-09
   CVE-2026-107820

   x64dbg-MCP Server integer overflow leads to process crash

   2 Disclosedinteger-overflow · mcp

   record AIR-2026-0287NVD ↗
3. 2026-09-22
   CVE-2026-77272

   CVE-2026-77272: Cross-site scripting in MCP Atlassian OAuth setup

   2 Disclosedxss · mcp

   record AIR-2026-0189NVD ↗
4. 2026-09-22
   CVE-2026-77258

   CVE-2026-77258: Arbitrary file upload flaw in MCP Atlassian

   2 Disclosedarbitrary-file-upload · mcp

   record AIR-2026-0188NVD ↗
5. 2026-09-22
   CVE-2026-77261

   CVE-2026-77261: SSRF vulnerability in MCP Atlassian server

   2 Disclosedssrf · mcp

   record AIR-2026-0187NVD ↗
6. 2026-09-22
   CVE-2026-77271

   CVE-2026-77271: Arbitrary file write and code execution in MCP Atlassian

   2 Disclosedrce · mcp

   record AIR-2026-0186NVD ↗
7. 2026-09-22
   CVE-2026-77274

   CVE-2026-77274: Backslash authority confusion SSRF in MCP Atlassian

   2 Disclosedssrf · mcp

   record AIR-2026-0185NVD ↗
8. 2026-09-22
   CVE-2026-77267

   CVE-2026-77267: Header-based SSRF vulnerability in MCP Atlassian server

   2 Disclosedssrf · mcp

   record AIR-2026-0184NVD ↗
9. 2026-09-22
   CVE-2026-77250

   CVE-2026-77250: Insecure plaintext token storage in MCP Atlassian server

   2 Disclosedtoken-leak · mcp

   record AIR-2026-0183NVD ↗
10. 2026-09-22
    CVE-2026-77242

    CVE-2026-77242: DNS rebinding vulnerability in MCP Atlassian server

    2 Disclosedssrf · mcp

    record AIR-2026-0182NVD ↗
11. 2026-09-22
    CVE-2026-77252

    CVE-2026-77252: Access control restriction bypass in MCP Atlassian filter inputs

    2 Disclosedmcp · accesscontrol

    record AIR-2026-0181NVD ↗
12. 2026-09-22
    CVE-2026-77253

    CVE-2026-77253: Filesystem boundary traversal in MCP Atlassian attachment upload

    2 Disclosedmcp · pathversal

    record AIR-2026-0180NVD ↗
13. 2026-09-22
    CVE-2026-77254

    CVE-2026-77254: Authentication boundary bypass in MCP Atlassian HTTP endpoint

    2 Disclosedmcp · authbypass

    record AIR-2026-0179NVD ↗
14. 2026-09-22
    CVE-2026-77249

    CVE-2026-77249: SSRF vulnerability in MCP Atlassian server user lookup

    2 Disclosedmcp · ssrf

    record AIR-2026-0178NVD ↗
15. 2026-09-22
    CVE-2026-77270

    CVE-2026-77270: Arbitrary file disclosure vulnerability in MCP Atlassian server

    2 Disclosedmcp · infravuln

    record AIR-2026-0177NVD ↗
16. 2026-09-22
    CVE-2026-77269

    CVE-2026-77269: MCP Atlassian incomplete patch allows source path traversal

    2 Disclosedmcp · atlassian

    record AIR-2026-0176NVD ↗
17. 2026-09-22
    CVE-2026-77257

    CVE-2026-77257: MCP Atlassian remote local file read and upload vulnerability

    2 Disclosedmcp · atlassian

    record AIR-2026-0175NVD ↗
18. 2026-09-22
    CVE-2026-77251

    CVE-2026-77251: MCP Atlassian access control bypass in search and board APIs

    2 Disclosedmcp · atlassian

    record AIR-2026-0174NVD ↗
19. 2026-09-22
    CVE-2026-77259

    CVE-2026-77259: MCP Atlassian local file disclosure via attachment upload

    2 Disclosedmcp · atlassian

    record AIR-2026-0173NVD ↗
20. 2026-09-22
    CVE-2026-77246

    CVE-2026-77246: MCP Atlassian allows unauthorized transport and request manipulation

    2 Disclosedmcp · atlassian

    record AIR-2026-0172NVD ↗
21. 2026-09-22
    CVE-2026-77260

    CVE-2026-77260: MCP Atlassian accepts unconstrained file paths in upload handler

    2 Disclosedmcp · arbitrary-file-read

    record AIR-2026-0171NVD ↗
22. 2026-09-22
    CVE-2026-77266

    CVE-2026-77266: MCP Atlassian allows absolute paths and traversal during upload

    2 Disclosedmcp · path-traversal

    record AIR-2026-0170NVD ↗
23. 2026-09-22
    CVE-2026-77262

    CVE-2026-77262: MCP Atlassian suffers from path traversal in file uploads

    2 Disclosedmcp · path-traversal

    record AIR-2026-0169NVD ↗
24. 2026-09-22
    CVE-2026-77243

    CVE-2026-77243: MCP Atlassian fails to recheck tool restrictions on dispatch

    2 Disclosedmcp · access-control

    record AIR-2026-0168NVD ↗
25. 2026-09-22
    CVE-2026-77256

    CVE-2026-77256: MCP Atlassian stores plaintext OAuth tokens insecurely

    2 Disclosedmcp · oauth

    record AIR-2026-0167NVD ↗
26. 2026-09-22
    CVE-2026-77248

    CVE-2026-77248: Unauthenticated file read and exfiltration in MCP Atlassian

    2 Disclosedunauthenticated-access · file-disclosure · mcp

    record AIR-2026-0166NVD ↗
27. 2026-09-22
    CVE-2026-77244

    CVE-2026-77244: Unauthenticated HTTP access in MCP Atlassian server

    2 Disclosedauth-bypass · mcp

    record AIR-2026-0165NVD ↗
28. 2026-09-22
    CVE-2026-77247

    CVE-2026-77247: Arbitrary file upload vulnerability in MCP Atlassian server

    2 Disclosedarbitrary-file-upload · mcp

    record AIR-2026-0164NVD ↗
29. 2026-09-22
    CVE-2026-77265

    CVE-2026-77265: DNS rebinding SSRF vulnerability in MCP Atlassian server

    2 Disclosedssrf · dns-rebinding · mcp

    record AIR-2026-0163NVD ↗
30. 2026-09-22
    CVE-2026-77268

    CVE-2026-77268: Insecure file permissions in MCP Atlassian server

    2 Disclosedmcp · insecure-permissions

    record AIR-2026-0162NVD ↗
31. 2026-09-22
    CVE-2026-77255

    CVE-2026-77255: MCP Atlassian Arbitrary File Read and Exfiltration Vulnerability

    2 Disclosedmcp · confused-deputy · arbitrary-file-read

    record AIR-2026-0161NVD ↗
32. 2026-09-18
    CVE-2026-58197

    CVE-2026-58197: Network isolation flaw in ToolHive MCP server management

    2 Disclosedmcp · network-isolation

    record AIR-2026-0148NVD ↗
33. 2026-09-17
    CVE-2026-50125

    CVE-2026-50125: Unauthenticated endpoint vulnerability in MKP MCP server

    2 Disclosedmcp · kubernetes

    record AIR-2026-0143NVD ↗
34. 2026-09-15
    CVE-2026-61568

    CVE-2026-61568: @zereight/mcp-gitlab lacks host allowlist protection

    2 Disclosedmcp · dns_rebinding · infra_vuln

    record AIR-2026-0128NVD ↗
35. 2026-09-15
    CVE-2026-58483

    CVE-2026-58483: mcp-searxng memory exhaustion vulnerability

    2 Disclosedmcp · infra_vuln

    record AIR-2026-0127NVD ↗
36. 2026-09-15
    CVE-2026-59971

    CVE-2026-59971: MySQL MCP Server lacks authentication and DNS protection

    2 Discloseddns_rebinding · mcp

    record AIR-2026-0126NVD ↗
37. 2026-09-15
    CVE-2026-58485

    CVE-2026-58485: mcp-searxng susceptible to server-side request forgery

    2 Disclosedssrf · mcp

    record AIR-2026-0125NVD ↗
38. 2026-09-15
    CVE-2026-54547

    CVE-2026-54547: Meta Ads MCP has HTTP authentication bypass flaw

    2 Disclosedauth_bypass · mcp

    record AIR-2026-0124NVD ↗
39. 2026-09-15
    CVE-2026-57441

    CVE-2026-57441: MCPVault contains path filter bypass vulnerability

    2 Disclosedpath_traversal · mcp

    record AIR-2026-0123NVD ↗
40. 2026-09-15
    CVE-2026-59973

    CVE-2026-59973: FrontMCP vulnerable to SSRF in OpenAPI spec loading

    2 Disclosedssrf · mcp

    record AIR-2026-0122NVD ↗
41. 2026-09-15
    CVE-2026-61559

    CVE-2026-61559: Dynamic API URL redirection flaw in mcp-gitlab

    2 Disclosedmcp · credential-leak

    record AIR-2026-0121NVD ↗
42. 2026-09-15
    CVE-2026-57442

    CVE-2026-57442: Path restriction bypass vulnerability in MCPVault

    2 Disclosedpath-traversal · mcp

    record AIR-2026-0120NVD ↗
43. 2026-09-15
    CVE-2026-54689

    CVE-2026-54689: URL policy bypass vulnerability in mcp-searxng

    2 Disclosedssrf · mcp

    record AIR-2026-0119NVD ↗
44. 2026-09-15
    CVE-2026-61560

    CVE-2026-61560: Authentication bypass and arbitrary file read in mcp-gitlab

    2 Disclosedmcp · token-theft

    record AIR-2026-0118NVD ↗
45. 2026-09-15
    CVE-2026-54688

    CVE-2026-54688: SSRF vulnerability in mcp-searxng MCP server

    2 Disclosedssrf · mcp

    record AIR-2026-0117NVD ↗
46. 2026-09-15
    CVE-2026-54549

    CVE-2026-54549: Meta Ads MCP Unvalidated Image URL Vulnerability

    2 Disclosedmcp · ssrf

    record AIR-2026-0116NVD ↗
47. 2026-09-15
    CVE-2026-54450

    CVE-2026-54450: ToolHive NAT64 IP Validation Vulnerability

    2 Disclosedmcp · ip-validation

    record AIR-2026-0115NVD ↗
48. 2026-09-15
    CVE-2026-58196

    CVE-2026-58196: ToolHive Authentication Discovery Vulnerability

    2 Disclosedmcp · ssrf

    record AIR-2026-0114NVD ↗
49. 2026-09-15
    CVE-2026-53957

    CVE-2026-53957: Contentful MCP Server Unsafe Network Options Vulnerability

    2 Disclosedmcp · insecure-network-options

    record AIR-2026-0113NVD ↗
50. 2026-09-14
    CVE-2026-73496

    CVE-2026-73496: MCP Atlassian vulnerable to arbitrary file upload and path traversal

    2 Disclosedmcp · path-traversal · arbitrary-file-upload

    record AIR-2026-0110NVD ↗
51. 2026-09-14
    CVE-2026-55837

    CVE-2026-55837: dbt-mcp OAuth helper exposes tokens without authentication

    2 Disclosedmcp · oauth · token-exposure

    record AIR-2026-0109NVD ↗
52. 2026-09-14
    CVE-2026-73497

    CVE-2026-73497: MCP Atlassian server vulnerable to SSRF via DNS rebinding

    2 Disclosedmcp · ssrf · dns-rebinding

    record AIR-2026-0108NVD ↗
53. 2026-08-25
    CVE-2026-55640

    CVE-2026-55640: Nextcloud MCP Server unauthenticated webhook vulnerability

    2 Disclosedmcp · authentication-bypass

    record AIR-2026-1294NVD ↗
54. 2026-08-13
    CVE-2026-19753

    CVE-2026-19753: Server-side request forgery in mcp-rdf-explorer MCP Server

    2 Disclosedssrf · mcp

    record AIR-2026-1279NVD ↗
55. 2026-08-12
    CVE-2026-73498

    CVE-2026-73498: Path traversal flaw in MCP Atlassian server allows arbitrary file read

    2 Disclosedmcp · path-traversal · atlassian

    record AIR-2026-0075NVD ↗
56. 2026-08-09
    CVE-2026-19334

    CVE-2026-19334: Ollama-mcp Local Command Injection Flaw

    2 Disclosedcommand-injection · ollama-mcp

    record AIR-2026-1271NVD ↗
57. 2026-08-07
    CVE-2026-48039

    CVE-2026-48039: Meta Ads MCP authentication bypass in middleware

    2 Disclosedmcp · auth-bypass

    record AIR-2026-1269NVD ↗
58. 2026-08-06
    CVE-2026-67531

    CVE-2026-67531: FrontMCP Sandbox Escape Leading to RCE

    2 Disclosedsandbox-escape · mcp · rce

    record AIR-2026-1264NVD ↗
59. 2026-07-22
    CVE-2026-44192

    CVE-2026-44192: Path Traversal Flaw in Ansible Lightspeed MCP Server

    2 Disclosedpath_traversal

    record AIR-2026-1213NVD ↗
60. 2026-07-20
    CVE-2026-46555

    CVE-2026-46555: WhatsApp MCP Server Unauthenticated API Vulnerability

    2 Disclosedmcp · unauthenticated_api

    record AIR-2026-1209NVD ↗
61. 2026-07-16
    CVE-2026-44968

    CVE-2026-44968: dbt-mcp vulnerability allows flag injection in subprocess

    2 Disclosedmcp · command-injection

    record AIR-2026-1190NVD ↗
62. 2026-07-16
    CVE-2026-44969

    CVE-2026-44969: dbt-mcp logs sensitive tool arguments in plaintext

    2 Disclosedmcp · logging

    record AIR-2026-1189NVD ↗
63. 2026-07-16
    CVE-2026-44970

    CVE-2026-44970: dbt-mcp telemeters unredacted tool call arguments

    2 Disclosedtelemetry · mcp

    record AIR-2026-1186NVD ↗
64. 2026-07-14
    CVE-2026-15643

    CVE-2026-15643: AWS HealthLake MCP Server SSRF Credential Exfiltration

    2 Disclosedssrf · mcp

    record AIR-2026-1161NVD ↗
65. 2026-07-03
    CVE-2026-13341

    Kong Konnect MCP Server Indirect Prompt Injection Vulnerability

    2 Disclosedmcp · indirect-prompt-injection

    record AIR-2026-1151NVD ↗
66. 2026-06-18
    CVE-2026-49257

    CVE-2026-49257: mcp-pinot exposes unauthenticated HTTP MCP server by default

    2 Disclosedmcp-pinot · authentication-bypass

    record AIR-2026-1115NVD ↗
67. 2026-06-11
    CVE-2026-46519

    CVE-2026-46519: Access control bypass vulnerability in mcp-server-kubernetes

    2 Disclosedmcp · access-control

    record AIR-2026-1106NVD ↗
68. 2026-06-11
    CVE-2026-47250

    CVE-2026-47250: mcp-server-kubernetes Privilege Escalation Vulnerability

    2 Disclosedmcp · privilege_escalation

    record AIR-2026-1105NVD ↗
69. 2026-05-29
    CVE-2026-45609

    Spring AI mcp-security Lacks Mandatory SSRF Mitigations

    2 Disclosedssrf · model_context_protocol

    record AIR-2026-1098NVD ↗
70. 2026-04-21
    CVE-2026-40576

    CVE-2026-40576: Path traversal in excel-mcp-server

    2 Disclosedpath_traversal · infra_vuln · mcp_server

    record AIR-2026-1044NVD ↗
71. 2026-04-16
    CVE-2026-39313

    CVE-2026-39313: Denial of service vulnerability in mcp-framework HTTP transport

    2 Discloseddos · mcp

    record AIR-2026-1031NVD ↗
72. 2026-04-15
    CVE-2026-39884

    CVE-2026-39884: Argument Injection in Kubernetes MCP Server Port Forward Tool

    2 Disclosedargument-injection · mcp · kubernetes

    record AIR-2026-1030NVD ↗
73. 2026-04-09
    CVE-2026-35577

    Apollo MCP Server Host Header Validation Vulnerability

    2 Discloseddns-rebinding · mcp

    record AIR-2026-1023NVD ↗
74. 2026-04-08
    CVE-2026-39885

    FrontMCP SSRF Vulnerability in OpenAPI Specification Processing

    2 Disclosedssrf · mcp

    record AIR-2026-1021NVD ↗
75. 2026-04-03
    CVE-2026-5470

    CVE-2026-5470: SSRF Vulnerability in Google-Research-MCP Content Extractor

    2 Disclosedssrf · mcp

    record AIR-2026-1009NVD ↗
76. 2026-03-27
    CVE-2026-33980

    CVE-2026-33980: Azure Data Explorer MCP Server KQL injection vulnerability

    2 Disclosedinjection · mcp

    record AIR-2026-1003NVD ↗
77. 2026-03-10
    CVE-2026-27826

    MCP Atlassian unauthenticated server-side request forgery vulnerability

    2 Disclosedssrf · mcp_server

    record AIR-2026-0983NVD ↗
78. 2026-03-10
    CVE-2026-27825

    MCP Atlassian directory traversal vulnerability allows arbitrary file write

    2 Disclosedpath_traversal · mcp_server

    record AIR-2026-0982NVD ↗
79. 2026-02-26
    CVE-2026-27735

    CVE-2026-27735: Path traversal vulnerability in Model Context Protocol git server

    2 Disclosedmcp · path-traversal

    record AIR-2026-0976NVD ↗
80. 2026-02-06
    CVE-2026-25650

    CVE-2026-25650: MCP Salesforce Connector Auth Token Disclosure Vulnerability

    2 Disclosedmcp · salesforce

    record AIR-2026-0957NVD ↗
81. 2026-02-04
    CVE-2026-25546

    CVE-2026-25546: Godot MCP Command Injection Vulnerability

    2 Disclosedmcp · command-injection · godot

    record AIR-2026-0954NVD ↗
82. 2026-01-23
    CVE-2025-15063

    CVE-2025-15063: Ollama MCP Server Command Injection RCE Vulnerability

    2 Disclosedcommand-injection · rce

    record AIR-2026-0948NVD ↗
83. 2025-12-19
    CVE-2025-66580

    CVE-2025-66580: Dive MCP Host Application RCE Vulnerability

    2 Disclosedmcp · xss · rce

    record AIR-2025-0511NVD ↗
84. 2025-12-17
    CVE-2025-68143

    CVE-2025-68143: Arbitrary path creation vulnerability in mcp-server-git

    2 Disclosedmcp

    record AIR-2025-0038NVD ↗
85. 2025-12-03
    CVE-2025-20381

    Splunk MCP Server Control Bypass Vulnerability CVE-2025-20381

    2 Disclosedallowlist_bypass · infra_vuln

    record AIR-2025-0506NVD ↗
86. 2025-12-01
    CVE-2025-66401

    MCP Watch Command Injection Vulnerability CVE-2025-66401

    2 Disclosedcommand_injection · infra_vuln

    record AIR-2025-0505NVD ↗
87. 2025-09-15
    CVE-2025-59155

    CVE-2025-59155: hackmd-mcp server-side request forgery vulnerability

    2 Disclosedssrf · mcp-server

    record AIR-2025-0481NVD ↗
88. 2025-09-04
    CVE-2025-58358

    CVE-2025-58358: Markdownify MCP server command injection vulnerability

    2 Disclosedcommand-injection · mcp

    record AIR-2025-0477NVD ↗
89. 2025-07-21
    CVE-2025-53832

    Command Injection in Lara Translate MCP Server

    2 Disclosedcommand-injection · mcp-server · rce

    record AIR-2025-0442NVD ↗
90. 2025-07-14
    CVE-2025-53818

    Command Injection in GitHub Kanban MCP Server

    2 Disclosedcommand-injection · mcp-server

    record AIR-2025-0441NVD ↗
91. 2025-07-09
    CVE-2025-6514

    CVE-2025-6514: mcp-remote vulnerable to OS command injection

    2 Disclosedcommand-injection

    record AIR-2025-0314GitHub Advisory Database ↗
92. 2025-07-08
    CVE-2025-53372

    CVE-2025-53372: Command injection vulnerability in node-code-sandbox-mcp

    2 Disclosedcommand-injection · mcp

    record AIR-2025-0439NVD ↗
93. 2025-07-02
    CVE-2025-34072

    CVE-2025-34072: Data exfiltration vulnerability in Anthropic Slack MCP Server

    2 Discloseddata-exfiltration · mcp

    record AIR-2025-0436NVD ↗
94. 2025-07-01
    CVE-2025-53109

    CVE-2025-53109: Model Context Protocol filesystem server symlink handling bypass

    2 Disclosedmcp · symlink

    record AIR-2025-0301GitHub Advisory Database ↗
95. 2025-07-01
    CVE-2025-53110

    CVE-2025-53110: Model Context Protocol filesystem server path validation bypass

    2 Disclosedmcp · path_traversal

    record AIR-2025-0300GitHub Advisory Database ↗
96. 2025-06-26
    CVE-2025-52573

    CVE-2025-52573: iOS Simulator MCP Server Command Injection Vulnerability

    2 Disclosedcommand_injection · mcp_server

    record AIR-2025-0432NVD ↗
97. 2025-05-12
    CVE-2025-47274

    CVE-2025-47274: Insecure Secret Storage in ToolHive MCP Server Utility

    2 Disclosedmcp

    record AIR-2025-0423NVD ↗