https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T21:00:11.509650+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-291111 EUVD-2026-291111 2026-10-16T21:00:11.512660+00:00 EUVD-2026-291111 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13822 fkie_cve-2025-13822 2026-10-16T21:00:11.512692+00:00

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges.

 https://cve.radiocsirt.org/vuln/ghsa-9vq7-9h42-j88h GHSA-9vq7-9h42-j88h — MCPHub has an authentication bypass 2026-10-16T21:00:11.512722+00:00

Affected: npm: @samanhappy/mcphub

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges.