EUVD-2026-71256
GHSA-2pmv-2qcc-jcgq
Severity by source
AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
DNS rebinding requires timing precision (AC:H) and authenticated session (PR:L); SSRF reaches internal systems (S:C/C:H); integrity downgraded to I:L absent explicit write-capability evidence from description.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.
AnalysisAI
Server-side request forgery via DNS rebinding in IBM ContextForge MCP Gateway allows a remote low-privileged attacker to pivot through the gateway into otherwise network-isolated internal resources, yielding high confidentiality impact and potential integrity impact against back-end services. The CVSS scope-change flag (S:C) reflects that a successful exploit extends the attack beyond the gateway itself to internal infrastructure it services. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a low-privilege authenticated session on the IBM ContextForge MCP Gateway (PR:L per CVSS vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS of 8.2 (AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) is broadly reasonable, though the AC:H classification deserves emphasis: successful DNS rebinding requires precise timing to race the gateway's DNS cache, meaningfully reducing opportunistic exploitation compared to straightforward SSRF. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released patch documented in IBM support advisory https://www.ibm.com/support/pages/node/7286055; exact patched version numbers should be confirmed directly from that advisory, as they are not independently derivable from the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: verify all IBM ContextForge MCP Gateway instances in production, document the network topology and backend resources they access, and assess which systems are most sensitive. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Contextforge Mcp Gateway
View allAdministrative account takeover in IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.7 lets a remote attacker log
Credential theft and privilege escalation in IBM ContextForge MCP Gateway v1.0.7 and earlier allow a remote low-privileg
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today