Tag

Cve-2026-18905

1 brief RSS

Information Disclosure via DNS Rebinding in IBM ContextForge MCP Gateway

IBM ContextForge MCP Gateway versions 1.0.6 and earlier contain a DNS rebinding vulnerability that allows remote authenticated attackers to access sensitive information during tool invocation.

mcp-contextforge-gateway vulnerability information-disclosure cve-2026-18905

1t 1c 49m ago