MC
Product
mcphub
13
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 4Low 0
Watch
Add mcphub to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-79748 | 9.9 | Aug 31 | MCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authorization on stdio command/args) Affected: < 0.12.15 |
| CVE-2025-11287 | 9.8 | Oct 5 | samanhappy MCPHub sseService.ts handleSseConnectionfunction improper authentication Affected: 0.9.0; 0.9.1; 0.9.2; 0.9.3; 0.9.4; 0.9.5; +5 more |
Showing 2