Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
windows-mcp
windows-mcp vulnerabilities (PyPI)
1 vulnerability.
windows-mcp
PyPI
Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS
CVE-2026-48989
Fix available
8.9
High
May 21, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open