Contextforge Mcp Gateway (Ibm) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 4 known versions, newest CVE from 2026-10-19. Vendor: Ibm.

CVEs of Contextforge Mcp Gateway

• CVE-2026-8355 - CVSS 5.4 (medium), 2026-10-19: IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation…
• CVE-2026-77825 - CVSS 4.9 (medium), 2026-09-24: IBM ContextForge MCP Gateway 1.0.0 through 1.0.8 was vulnerable to path traversal in its Admin API log-download endpoint (`GET /v1/admin/logs/file`). The path…
• CVE-2026-11918 - CVSS 5.4 (medium), 2026-09-15: IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive…
• CVE-2026-78573 - CVSS 9.8 (critical), 2026-09-10: IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials.