{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/ruflo/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ruflo:mcp_bridge:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2026-59726"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=KS:EXPLOITS-LINUX-HTTP-RUFLO_MCP_CVE_2026_59726_RCE\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["MCP Bridge"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Ruflo"],"content_html":"\u003cp\u003eCVE-2026-59726 is an unauthenticated remote code execution vulnerability in the Ruflo MCP Bridge. The vulnerability allows an attacker to interact with the JSON-RPC endpoint at /mcp to invoke the 'ruflo__terminal_execute' tool, facilitating arbitrary command execution.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003cp\u003eAn attacker can send an unauthenticated JSON-RPC request to the /mcp endpoint to trigger the 'ruflo__terminal_execute' tool, which provides the ability to execute commands on the host.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation permits arbitrary command execution on the target system.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eMonitor for unauthorized access to the Ruflo MCP Bridge JSON-RPC interface.\u003c/p\u003e\n","date_modified":"2026-11-13T01:02:27Z","date_published":"2026-11-13T01:02:27Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ruflo-mcp-rce-cve-2026-59726/","summary":"Public exploit code is available for a critical unauthenticated remote code execution vulnerability (CVE-2026-59726) in the Ruflo MCP Bridge via the JSON-RPC interface.","title":"Ruflo MCP Bridge Unauthenticated Remote Code Execution (CVE-2026-59726)","url":"https://feed.craftedsignal.io/briefs/2026-11-ruflo-mcp-rce-cve-2026-59726/"}],"language":"en","title":"CraftedSignal Threat Feed - Ruflo","version":"https://jsonfeed.org/version/1.1"}