CVE-2026-18905
HIGH
NVD
CVSS Score
7.7
Severity
HIGH
Published
Sep 04, 2026
Vendor
unknown
Description
IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive information due to a DNS rebinding vulnerability during tool invocation.