Login Request a demo
CM
Product
ContextForge MCP Gateway (`mcp-contextforge-gateway`)
by IBM · last CVE Oct 19, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 2High 2Medium 3Low 0
Severity
All severities7Critical2High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ContextForge MCP Gateway (`mcp-contextforge-gateway`) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-78573
9.8
1%
Sep 10
IBM ContextForge MCP Gateway is affected by use of default credentials
Affected: 1.0.0 through 1.0.7
CVE-2026-77822
9.6
0%
Sep 4
IBM ContextForge MCP Gateway is affected by server-side request forgery (DNS rebinding) via the A2A agent invocation endpoint
Affected: <= v1.0.8
Showing 2