Login Request a demo
CO
Product
Contextforge
by Ibm · last CVE Sep 24, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 2High 3Medium 1Low 0
Severity
All severities6Critical2High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Contextforge to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-78573
9.8
1%
Sep 10
IBM ContextForge MCP Gateway is affected by use of default credentials
Affected: 1.0.0 through 1.0.7
CVE-2026-77822
9.6
0%
Sep 4
IBM ContextForge MCP Gateway is affected by server-side request forgery (DNS rebinding) via the A2A agent invocation endpoint
Affected: through 1.0.8
CVE-2026-18486
8.8
1%
Sep 4
IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution
Affected: through 1.0.7
CVE-2026-18905
7.7
0%
Sep 4
IBM ContextForge MCP Gateway is affected by server-side request forgery via DNS TOCTOU at tool invocation
Affected: through 1.0.6
CVE-2026-18489
7.4
0%
Sep 4
IBM ContextForge Translate is affected by cross-client credential context confusion
Affected: through 1.0.8
CVE-2026-77825
4.9
0%
Sep 24
IBM ContextForge MCP Gateway is affected by path traversal
Affected: 1.0.0 before 1.0.9
Showing 6