SA
Vendor
samanhappy
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-94047 | MC MCPHub samanhappy | 6.3 | Sep 20 | samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management |
| CVE-2026-90474 | MC mcphub samanhappy | 6.8 | Sep 12 | MCPHub before 1.0.32 OAuth 2.0 Authentication Bypass |
| CVE-2026-79743 | MC mcphub samanhappy | 6.9 | Aug 31 | MCPHub: Path Traversal via Malicious MCPB Manifest Name |
| CVE-2026-79744 | MC mcphub samanhappy | 8.8 | Aug 31 | MCPHub: Missing Authorization on `PUT /api/system-config` Lets Any Non-Admin Rewrite Global Security Configuration |
| CVE-2026-79745 | MC mcphub samanhappy | 7.1 | Aug 31 | MCPHub: Missing Authorization on Built-in Prompt & Resource CRUD (Unauthorized Tampering of Globally-Served Templates/Resources) |
| CVE-2026-79746 | MC mcphub samanhappy | 8.1 | Aug 31 | MCPHub: Server-scoped bearer key gains access to an entire group via partial (any-overlap) server matching |
| CVE-2026-79747 | MC mcphub samanhappy | 7.1 | Aug 31 | MCPHub vulnerable to SSRF: a non-admin user can make mcphub request arbitrary URLs and read the response (OpenAPI proxy + transport dial) |
| CVE-2026-79748 | MC mcphub samanhappy | 9.9 | Aug 31 | MCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authorization on stdio command/args) |
| CVE-2026-79749 | MC mcphub samanhappy | 7.6 | Aug 31 | MCPHub: SSRF Guard Bypass via IPv6 Transition Addresses in URL Validation |
| CVE-2026-79750 | MC mcphub samanhappy | 7.7 | Aug 31 | MCPHub authenticated horizontal IDOR: any non-admin user executes tools on other users' MCP servers (cross-tenant file read + SSRF) |
| CVE-2025-11287 | MC MCPHub samanhappy | 9.8 | Oct 5 | samanhappy MCPHub sseService.ts handleSseConnectionfunction improper authentication |
| CVE-2025-11286 | MC MCPHub samanhappy | 4.7 | Oct 5 | samanhappy MCPHub MCPRouter Service serverController.ts server-side request forgery |
| CVE-2025-11285 | MC MCPHub samanhappy | 8.8 | Oct 5 | samanhappy MCPHub serverController.ts os command injection |