SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-11918

MEDIUM · CVSS 5.4 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

IBM ContextForge MCP Gateway versions up to 1.0.4 are vulnerable to a flaw that allows authenticated users to bypass security mechanisms through incomplete recursive inspection of nested payloads. This could lead to unauthorized access or manipulation of sensitive data within the application. Organizations using this gateway should prioritize remediation to mitigate potential risks associated with this vulnerability.

CVE
CVE-2026-11918
Severity
MEDIUM
CVSS
5.4
EPSS
0.27%

Original NVD Description

IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content.