Skip to content
Threat Feed
Subscribe

Tag

CWE-306

2 briefs RSS
critical advisory

Network-AI Unauthenticated Access to MCP HTTP Endpoint

Network-AI is vulnerable to missing authentication on the MCP HTTP endpoint, allowing unauthenticated privileged tool calls that could lead to configuration changes and agent manipulation.

Network-AI cwe-306 authentication-bypass
2r 1t 2i
high advisory

free5GC NEF Unauthenticated Callback Vulnerability

free5GC NEF v4.2.1 exposes an unauthenticated callback route group, enabling attackers to forge SMF callbacks and potentially corrupt AF traffic-influence or PFD-management subscription views, leading to unauthorized policy changes.

nef:v4.2.1 +1 5G NEF Authentication Bypass CWE-306 CWE-862
2r 1t