Product
Public exploit code is available for a critical unauthenticated remote code execution vulnerability (CVE-2026-59726) in the Ruflo MCP Bridge via the JSON-RPC interface.