https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:31:12.073917+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-308024 EUVD-2026-308024 2026-10-08T20:31:12.105393+00:00 EUVD-2026-308024 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7417 fkie_cve-2026-7417 2026-10-08T20:31:12.105431+00:00

A vulnerability was found in Algovate xhs-mcp 0.8.11. This affects the function xhs_publish_content of the file src/server/mcp.server.ts of the component MCP Interface. Performing a manipulation of the argument media_paths results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

 https://cve.radiocsirt.org/vuln/ghsa-4jg5-6fpg-j2hg GHSA-4jg5-6fpg-j2hg 2026-10-08T20:31:12.105466+00:00

A vulnerability was found in Algovate xhs-mcp 0.8.11. This affects the function xhs_publish_content of the file src/server/mcp.server.ts of the component MCP Interface. Performing a manipulation of the argument media_paths results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.