What’s Vulnerable › Products

ihor-sokoliuk mcp-searxng vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your ihor-sokoliuk mcp-searxng version is affected

Latest ihor-sokoliuk mcp-searxng vulnerabilities

• CVE-2026-58485 — mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read` (CVSS 7.1)
• CVE-2026-58483 — mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read` (CVSS 7.5)
• CVE-2026-54689 — mcp-searxng hardened-mode SSRF bypasses permit internal URL access (CVSS 6.3)
• CVE-2026-54688 — mcp-searxng: SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off) (CVSS 6.5)