Advisories · Technology

CoreBunch Instatic.

Every CVE that names CoreBunch Instatic among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-121458 CVE record

CVSS 7.1 High

Instatic before 0.0.21 Authorization Bypass via MCP Content Read Tools
- CoreBunch Instatic
- Broken access control
Not analysed yet 3 Nov 2026
CVE-2026-72587 CVE record

CVSS 6.1 Medium

Instatic - Cache Poisoning via Unauthenticated Server Island Endpoint
- CoreBunch Instatic
- HTTP request smuggling
Not analysed yet 10 Aug 2026