Export limit exceeded: 424496 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424496 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424496 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424496 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 424496 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (2 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-125926 1 Aws 1 Mcp-gateway-registry 2026-11-11 8.5 High
Server-side request forgery (SSRF) in the server registration and update API in Amazon mcp-gateway-registry before 1.35.0 might allow an authenticated remote user to send requests from the gateway to internal network services and cloud instance metadata endpoints and read the responses via a crafted request. To remediate this issue, users should upgrade to version 1.35.0.
CVE-2026-100307 1 Aws 1 Mcp-gateway-registry 2026-11-11 8.8 High
Missing authorization in the external management API in Amazon mcp-gateway-registry 1.0.9 through 1.24.7 might allow an authenticated remote user to assign the registry administrator scope to their own identity group and obtain administrative control of every registered gateway asset via a crafted group import request. To remediate this issue, users should upgrade to version 1.25.0.