| CVE-2026-16481 |
A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the…
|
6.0
Medium
|
Jul 27, 2026 |
| CVE-2026-15829 |
A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the prebuilt BigQuery…
|
8.6
High
|
Jul 21, 2026 |
| CVE-2026-11720 |
A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox
|
9.3
Critical
|
Jun 29, 2026 |
| CVE-2026-11719 |
An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement…
|
8.6
High
|
Jun 18, 2026 |
| CVE-2026-11718 |
An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of…
|
9.3
Critical
|
Jun 18, 2026 |
| CVE-2026-11717 |
An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of…
|
9.3
Critical
|
Jun 18, 2026 |