Product by Samanhappy
MCPHub
14 known vulnerabilities in MCPHub (Samanhappy), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-11285 | samanhappy MCPHub serverController.ts os command injection | 6.3 | |
| Critical | CVE-2026-79748 | MCPHub: Missing Authorization | 9.9 | |
| High | CVE-2026-79744 | MCPHub: Improper Privilege Management | 8.8 | |
| High | CVE-2026-90474 | MCPHub before 1.0.32 OAuth 2.0 Authentication Bypass | 6.8 | |
| High | CVE-2026-79746 | MCPHub: Incorrect Authorization | 8.1 | |
| Medium | CVE-2026-79743 | MCPHub: Path Traversal via Malicious MCPB Manifest Name | — | |
| High | CVE-2026-79749 | MCPHub: SSRF Guard Bypass via IPv6 Transition Addresses in URL Validation | — | |
| High | CVE-2026-79750 | MCPHub: Authorization Bypass Through User-Controlled Key | 7.7 | |
| High | CVE-2026-79745 | MCPHub: Missing Authorization | 7.1 | |
| Medium | CVE-2026-94047 | samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management | 6.3 | |
| Critical | CVE-2025-11287 | samanhappy MCPHub sseService.ts handleSseConnectionfunction improper authentication | 7.3 | |
| High | CVE-2026-79747 | MCPHub: Server-Side Request Forgery (SSRF) | 7.1 | |
| Medium | CVE-2026-120323 | samanhappy MCPHub passthroughHeaders.ts information disclosure | 4.3 | |
| Medium | CVE-2025-11286 | samanhappy MCPHub MCPRouter Service serverController.ts server-side request forgery | 4.7 |