CVE ID :CVE-2026-108859 Published : Oct. 11, 2026, 2:17 p.m. | 1 hour, 13 minutes ago Description :mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memory by sending oversized POST bodies....

#Sicherheitslücke #DDoS

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-108859 - mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering

VERWANDTEARTIKEL

CVE-2026-108902 - pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link

CVE-2026-108905 - pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header

CVE-2026-108863 - Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface

CVE-2026-108865 - AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypass via /authorize

CVE-2026-108860 - BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key

CVE-2026-108698 - hyper-mcp through 0.8.3 OCI Plugin Signature Verification TOCTOU Race Condition