TO
Product
Tooling
12
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 5High 5Medium 2Low 0
Watch
Add Tooling to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-16496 | 8.9 | Jul 28 | terraform-mcp-server vulnerable to cross-user credential inheritance if an MCP session ID is obtained by another user Affected: 0.3.0 before 1.1.0 |
| CVE-2026-16328 | 8.6 | Jul 29 | consul-mcp-server vulnerable to server side request forgery leading to token exposure Affected: 0.1.0 before 0.1.4 |
| CVE-2026-14869 | 8.6 | Jul 28 | terraform-mcp-server vulnerable to server side request forgery leading to token exposure Affected: 0.3.0 before 1.1.0 |
| CVE-2026-87993 | 7.7 | Sep 10 | Consul-template vulnerable to an information disclosure issue in error handling Affected: 0.27.2 before 0.43.0 |
| CVE-2026-4660 | 7.5 | Apr 9 | Go-getter may allow to arbitrary filesystem reads through git operations Affected: before 1.8.6 |
Showing 5
