https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:20:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-368011 EUVD-2026-368011 https://cve.radiocsirt.org/vuln/euvd-2026-368011 https://cve.radiocsirt.org/vuln/fkie_cve-2026-38924 <p>In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a &#34;potential security hazard&#34; but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended &#34;use a sandboxed environment for running Serena.&#34;</p> <p>In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a &#34;potential security hazard&#34; but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended &#34;use a sandboxed environment for running Serena.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-38924 https://cve.radiocsirt.org/vuln/ghsa-gx4x-gc82-v87q <p>In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a &#34;potential security hazard&#34; but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended &#34;use a sandboxed environment for running Serena.&#34;</p> <p>In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a &#34;potential security hazard&#34; but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended &#34;use a sandboxed environment for running Serena.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-gx4x-gc82-v87q