Ibm Contextforge vulnerabilities

• ibm contextforge, contextforge mcp gateway +1 more IBM ContextForge MCP Gateway is affected by server-side request forgery CVE-2026-8355 5.4 MediumOctober 19, 2026
• ibm contextforge, contextforge mcp gateway +1 more IBM ContextForge MCP Gateway is affected by path traversal CVE-2026-77825 4.9 MediumSeptember 24, 2026
• ibm contextforge mcp gateway IBM ContextForge MCP Gateway is affected by security filter bypass via nested payload structures CVE-2026-11918 5.4 MediumSeptember 15, 2026
• ibm contextforge, contextforge mcp gateway +1 more IBM ContextForge MCP Gateway is affected by use of default credentials CVE-2026-78573 9.8 CriticalSeptember 10, 2026
• ibm contextforge, contextforge mcp gateway +1 more IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution CVE-2026-18486 8.8 HighSeptember 4, 2026
• ibm contextforge, contextforge mcp gateway - translate utility +1 more IBM ContextForge Translate is affected by cross-client credential context confusion CVE-2026-18489 7.4 HighSeptember 4, 2026
• ibm contextforge, contextforge mcp gateway (`mcp-contextforge-gateway`) +1 more IBM ContextForge MCP Gateway is affected by server-side request forgery via DNS TOCTOU at tool invocation CVE-2026-18905 7.7 HighSeptember 4, 2026
• ibm contextforge, contextforge mcp gateway +1 more IBM ContextForge MCP Gateway is affected by server-side request forgery (DNS rebinding) via the A2A agent invocation endpoint CVE-2026-77822 8.2 HighSeptember 4, 2026
• ibm mcp-context-forge, mcp-contextforge-gateway +1 more ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`) CVE-2026-53708 Fix available 6.6 MediumAugust 14, 2026