CVE-2026-62863 - MoLing: unauthenticated SSE and wildcard CORS expose tool sessions
CVE ID :CVE-2026-62863 Published : Oct. 30, 2026, 9:17 p.m. | 44 minutes ago Description :MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its `/sse` and `/message` HTTP endpoints do not authenticate requests and the `mcp-go`...