Advisories · Technology

IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`).

Every CVE that names IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18905 CVE record

CVSS 7.7 High

IBM ContextForge MCP Gateway is affected by server-side request forgery via DNS TOCTOU at tool invocation
- IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`)
- Server-side request forgery (SSRF)
Not analysed yet 4 Sept 2026