Product by IBM

    IBM ContextForge MCP Gateway

    9 known vulnerabilities in IBM ContextForge MCP Gateway (IBM), 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in IBM ContextForge MCP Gateway (IBM)
    CriticalCVE-2026-78573

    IBM ContextForge MCP Gateway is affected by use of default credentials

    also in 1 other product

    		9.8
    HighCVE-2026-18486

    IBM ContextForge MCP Gateway: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		8.8
    MediumCVE-2026-18484

    IBM ContextForge MCP Gateway: Use of Incorrectly-Resolved Name or Reference

    also in 1 other product

    		6.5
    HighCVE-2026-18905

    IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`): Server-Side Request Forgery (SSRF)

    		7.7
    CriticalCVE-2026-77822

    IBM ContextForge MCP Gateway: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		8.2
    HighCVE-2026-18489

    IBM ContextForge Translate is affected by cross-client credential context confusion

    		7.4
    MediumCVE-2026-8355

    IBM ContextForge MCP Gateway is affected by server-side request forgery

    also in 1 other product

    		5.4
    MediumCVE-2026-77825

    IBM ContextForge MCP Gateway is affected by path traversal

    also in 1 other product

    		4.9
    MediumCVE-2026-11918

    IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structures

    also in 1 other product

    		5.4

    All products by IBM