What’s Vulnerable › Products

IBM ContextForge MCP Gateway vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your IBM ContextForge MCP Gateway version is affected

Latest IBM ContextForge MCP Gateway vulnerabilities

• CVE-2026-8355 — IBM ContextForge MCP Gateway is affected by server-side request forgery (CVSS 5.4)
• CVE-2026-77825 — IBM ContextForge MCP Gateway is affected by path traversal (CVSS 4.9)
• CVE-2026-11918 — IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structures (CVSS 5.4)
• CVE-2026-78573 — IBM ContextForge MCP Gateway is affected by use of default credentials (CVSS 9.8)
• CVE-2026-18489 — IBM ContextForge Translate is affected by cross-client credential context confusion (CVSS 7.4)
• CVE-2026-18486 — IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution (CVSS 8.8)
• CVE-2026-77822 — IBM ContextForge MCP Gateway is affected by server-side request forgery (DNS rebinding) via the A2A agent invocation endpoint (CVSS 9.6)
• CVE-2026-18905 — IBM ContextForge MCP Gateway is affected by server-side request forgery via DNS TOCTOU at tool invocation (CVSS 7.7)