{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aamazonmcp_gateway_registry/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:amazon:mcp_gateway_registry:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.5,"id":"CVE-2026-125926"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["mcp-gateway-registry (\u003c 1.35.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Amazon"],"content_html":"\u003cp\u003eAmazon mcp-gateway-registry before version 1.35.0 is vulnerable to server-side request forgery (SSRF). An authenticated remote attacker can manipulate the server registration and update API to send unauthorized requests to internal network services or cloud instance metadata endpoints and retrieve the resulting information.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated attacker to perform requests to internal services that may not be accessible from the public internet and to exfiltrate data from cloud instance metadata endpoints, which potentially contain sensitive configuration data or credentials.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUsers of the Amazon mcp-gateway-registry should upgrade to version 1.35.0 or later to address the vulnerability in the server registration and update API.\u003c/p\u003e\n","date_modified":"2026-11-11T22:12:21Z","date_published":"2026-11-11T22:12:21Z","id":"https://feed.craftedsignal.io/briefs/2026-11-amazon-mcp-gateway-ssrf-cve-2026-125926/","summary":"An SSRF vulnerability in the Amazon mcp-gateway-registry server registration and update API allows authenticated remote users to access internal network services and cloud metadata endpoints.","title":"Amazon mcp-gateway-registry: Server-side request forgery (CVE-2026-125926)","url":"https://feed.craftedsignal.io/briefs/2026-11-amazon-mcp-gateway-ssrf-cve-2026-125926/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:amazon:mcp_gateway_registry:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-100307"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["mcp-gateway-registry (1.0.9-1.24.7)"],"_cs_severities":["high"],"_cs_tags":["cve","privilege-escalation","cloud"],"_cs_type":"advisory","_cs_vendors":["Amazon"],"content_html":"\u003cp\u003eAmazon mcp-gateway-registry versions 1.0.9 through 1.24.7 contain a missing authorization vulnerability (CVE-2026-100307) in the external management API. An authenticated remote attacker can exploit this flaw by sending a crafted group import request to assign the registry administrator scope to their own identity group. This allows the attacker to obtain administrative control of all registered gateway assets.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in full administrative control over all registered gateway assets managed by the vulnerable service. The vulnerability is rated with a CVSS v3.1 base score of 8.8.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpgrade the Amazon mcp-gateway-registry service to version 1.25.0 or later immediately to resolve the missing authorization flaw.\u003c/p\u003e\n","date_modified":"2026-11-11T22:12:14Z","date_published":"2026-11-11T22:12:14Z","id":"https://feed.craftedsignal.io/briefs/2026-11-amazon-mcp-gateway-registry-auth-bypass-cve-2026-100307/","summary":"An authenticated remote attacker can exploit a missing authorization flaw in the Amazon mcp-gateway-registry external management API to escalate privileges and obtain administrative control over all registered gateway assets.","title":"Amazon mcp-gateway-registry: Missing authorization in management API (CVE-2026-100307)","url":"https://feed.craftedsignal.io/briefs/2026-11-amazon-mcp-gateway-registry-auth-bypass-cve-2026-100307/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:amazon:mcp_gateway_registry:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}