| CVE-2026-16481 |
A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the…
|
6.0
Moyenne
|
27 juil. 2026 |
| CVE-2026-15829 |
A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the prebuilt BigQuery…
|
8.6
Élevée
|
21 juil. 2026 |
| CVE-2026-11720 |
A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox
|
9.3
Critique
|
29 juin 2026 |
| CVE-2026-11719 |
An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement…
|
8.6
Élevée
|
18 juin 2026 |
| CVE-2026-11718 |
An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of…
|
9.3
Critique
|
18 juin 2026 |
| CVE-2026-11717 |
An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of…
|
9.3
Critique
|
18 juin 2026 |