Tag
critical
advisory
Network-AI Unauthenticated Access to MCP HTTP Endpoint
2 rules 1 TTP 2 IOCsNetwork-AI is vulnerable to missing authentication on the MCP HTTP endpoint, allowing unauthenticated privileged tool calls that could lead to configuration changes and agent manipulation.
Network-AI
cwe-306
authentication-bypass
2r
1t
2i
high
advisory
free5GC NEF Unauthenticated Callback Vulnerability
2 rules 1 TTPfree5GC NEF v4.2.1 exposes an unauthenticated callback route group, enabling attackers to forge SMF callbacks and potentially corrupt AF traffic-influence or PFD-management subscription views, leading to unauthorized policy changes.
nef:v4.2.1 +1
5G
NEF
Authentication Bypass
CWE-306
CWE-862
2r
1t