CVE-2026-18489

概要

参考情報

• ibm.com/support/pages/node/7286056 · Patch

contextforge のその他の脆弱性

• CVE-2026-77825中 4.9IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/log…
• CVE-2026-78573緊急 9.8IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default crede…
• CVE-2026-18486高 8.8IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and esc…
• CVE-2026-77822緊急 9.6IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery …
• CVE-2026-18905高 7.7IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain …