What’s Vulnerable › Products

CursorTouch Windows-MCP vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your CursorTouch Windows-MCP version is affected

Latest CursorTouch Windows-MCP vulnerabilities

• CVE-2026-48989 — Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS (CVSS 8.9)