Threats tagged 'ghsa-cm89-cv3h-2jcf'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 1.2%	CVE-2026-102243MODSetter SurfSense · Injection Medium5.3EPSS 1.2%2026-09-29GCVE DatabaseCVE-2026-102243 MODSetter SurfSense up to version 2.0.3 contains a command injection vulnerability in the MCP Connector Integration component, specifically in the /api/search-source/connectors/mcp/test endpoint. This vulnerability allows remote attackers with low privileges to execute arbitrary commands. Public exploit code exists, but no vendor response or patch is currently available. EPSS 1.2%Report on CVE-2026-102243 Vulnerability CWE-74 #ghsa-cm89-cv3h-2jcf	GCVE Database	2026-09-29

Page 1 of 1