S
Vendor security profile
samanhappy
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical1
CISA KEV0
Public exploit7
Patch rate%20
Avg. CVSS7.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
8
2
0
CVE KEV
CVE severity distribution
10toplam CVE
Critical1 (10%)
High7 (70%)
Medium2 (20%)
Patch and exploitation view
%20
Verified patch
%0
CISA KEV
%70
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
5.3
CVE-2026-94047
samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management
S
Patch verifiedEPSS %0
7.6
CVE-2026-90474
MCPHub before 1.0.32 OAuth 2.0 Authentication Bypass
S
Patch verifiedEPSS %1
6.9
CVE-2026-79743
MCPHub: Path Traversal via Malicious MCPB Manifest Name
S
Patch status unknownEPSS %1
8.8
CVE-2026-79744
MCPHub: Missing Authorization on `PUT /api/system-config` Lets Any Non-Admin Rewrite Global Security Configuration
S
Patch status unknownEPSS %1
7.1
CVE-2026-79745
MCPHub: Missing Authorization on Built-in Prompt & Resource CRUD (Unauthorized Tampering of Globally-Served Templates/Resources)
S
Patch status unknownEPSS %0
8.1
CVE-2026-79746
MCPHub: Server-scoped bearer key gains access to an entire group via partial (any-overlap) server matching
S
Patch status unknownEPSS %0
7.1
CVE-2026-79747
MCPHub vulnerable to SSRF: a non-admin user can make mcphub request arbitrary URLs and read the response (OpenAPI proxy + transport dial)
S
Patch status unknownEPSS %0
9.9
CVE-2026-79748
MCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authorization on stdio command/args)
S
Patch status unknownEPSS %1
7.6
CVE-2026-79749
MCPHub: SSRF Guard Bypass via IPv6 Transition Addresses in URL Validation
S
Patch status unknownEPSS %0
7.7
CVE-2026-79750
MCPHub authenticated horizontal IDOR: any non-admin user executes tools on other users' MCP servers (cross-tenant file read + SSRF)
S
Patch status unknownEPSS %0