Product by IBM
Contextforge Mcp Gateway
15 known vulnerabilities in Contextforge Mcp Gateway (IBM), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-78573 | IBM ContextForge MCP Gateway is affected by use of default credentials | 9.8 | |
| High | CVE-2026-18486 | IBM ContextForge MCP Gateway: Exposure of Sensitive Information to an Unauthorized Actor | 8.8 | |
| Medium | CVE-2026-18484 | IBM ContextForge MCP Gateway: Use of Incorrectly-Resolved Name or Reference | 6.5 | |
| Critical | CVE-2026-77822 | IBM ContextForge MCP Gateway: Server-Side Request Forgery (SSRF) | 8.2 | |
| High | CVE-2026-110279 | IBM ContextForge MCP Gateway is affected by an improper authentication vulnerability | 8.1 | |
| High | CVE-2026-110278 | IBM ContextForge MCP Gateway is affected by an information exposure vulnerability | 7.4 | |
| Medium | CVE-2026-94407 | IBM ContextForge MCP Gateway is affected by a regular expression denial of service | 6.5 | |
| Medium | CVE-2026-110189 | IBM ContextForge MCP Gateway: Incomplete List of Disallowed Inputs | 6.5 | |
| Medium | CVE-2026-8355 | IBM ContextForge MCP Gateway is affected by server-side request forgery | 5.4 | |
| Medium | CVE-2026-110194 | IBM ContextForge MCP Gateway is affected by a server-side request forgery vulnerability | 5.4 | |
| Medium | CVE-2026-110195 | IBM ContextForge MCP Gateway is affected by an authorization bypass vulnerability | 5.4 | |
| Medium | CVE-2026-77825 | IBM ContextForge MCP Gateway is affected by path traversal | 4.9 | |
| Medium | CVE-2026-110199 | IBM ContextForge MCP Gateway is affected by a DOM-based cross-site scripting | 4.8 | |
| Medium | CVE-2026-11918 | IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structures | 5.4 | |
| Medium | CVE-2026-110178 | IBM ContextForge MCP Gateway: Improper Access Control | 4.1 |