agentprime: samanhappy-mcphubEvery new CVE for samanhappy-mcphub.https://agentprime.io/CVE-2026-120323: samanhappy MCPHub passthroughHeaders.ts information disclosurehttps://agentprime.io/advisories/CVE-2026-120323/https://agentprime.io/advisories/CVE-2026-120323/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 02:00:22 GMTCVECVE-2026-94047: samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges managementhttps://agentprime.io/advisories/CVE-2026-94047/https://agentprime.io/advisories/CVE-2026-94047/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 20 Sep 2026 19:00:13 GMTCVECVE-2026-90474: MCPHub before 1.0.32 OAuth 2.0 Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-90474/https://agentprime.io/advisories/CVE-2026-90474/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 11:06:12 GMTCVECVE-2026-79744: MCPHub: Missing Authorization on `PUT /api/system-config` Lets Any Non-Admin Rewrite Global Security Configurationhttps://agentprime.io/advisories/CVE-2026-79744/https://agentprime.io/advisories/CVE-2026-79744/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 17:56:38 GMTCVECVE-2026-79745: MCPHub: Missing Authorization on Built-in Prompt & Resource CRUD (Unauthorized Tampering of Globally-Served Templates/Resources)https://agentprime.io/advisories/CVE-2026-79745/https://agentprime.io/advisories/CVE-2026-79745/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 17:56:17 GMTCVECVE-2026-79746: MCPHub: Server-scoped bearer key gains access to an entire group via partial (any-overlap) server matchinghttps://agentprime.io/advisories/CVE-2026-79746/https://agentprime.io/advisories/CVE-2026-79746/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 17:55:43 GMTCVECVE-2026-79747: MCPHub vulnerable to SSRF: a non-admin user can make mcphub request arbitrary URLs and read the response (OpenAPI proxy + transport dial)https://agentprime.io/advisories/CVE-2026-79747/https://agentprime.io/advisories/CVE-2026-79747/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 17:55:20 GMTCVECVE-2026-79748: MCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authorization on stdio command/args)https://agentprime.io/advisories/CVE-2026-79748/https://agentprime.io/advisories/CVE-2026-79748/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 17:55:08 GMTCVEcriticalCVE-2026-79749: MCPHub: SSRF Guard Bypass via IPv6 Transition Addresses in URL Validationhttps://agentprime.io/advisories/CVE-2026-79749/https://agentprime.io/advisories/CVE-2026-79749/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 17:54:45 GMTCVECVE-2026-79750: MCPHub authenticated horizontal IDOR: any non-admin user executes tools on other users' MCP servers (cross-tenant file read + SSRF)https://agentprime.io/advisories/CVE-2026-79750/https://agentprime.io/advisories/CVE-2026-79750/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Aug 2026 17:54:14 GMTCVECVE-2025-11286: samanhappy MCPHub MCPRouter Service serverController.ts server-side request forgeryhttps://agentprime.io/advisories/CVE-2025-11286/https://agentprime.io/advisories/CVE-2025-11286/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 05 Oct 2025 06:32:05 GMTCVE