A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Upgrading to version 1.0.33 is sufficient to resolve this issue. The identifier of the patch is 18a4467bc4ec6390b1f841d8a468a37e9922f837. It is advisable to upgrade the affected component.
MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens without providing a client secret or PKCE verifier, gaining access to victim accounts and their privileges.
CVE-2026-79743 is a path traversal vulnerability in samanhappy mcphub prior to version 0.12.13. The MCPB File Upload Handler extracts a ZIP file and reads a manifest.json file, where the name field is concatenated into a file path without sanitization. This allows an attacker to craft a malicious file that can be extracted to arbitrary locations on the file system. Additionally, the unsanitized name is used in a cleanup function that may delete arbitrary directories. The issue has been patched in version 0.12.13.
CVE-2026-79744 is a high severity vulnerability in samanhappy mcphub prior to version 1.0.29. The PUT /api/system-config endpoint lacks proper authorization checks, relying only on app-wide authentication and rate limiting without verifying administrative privileges. This improper privilege management allows users with limited privileges to potentially modify system configuration. The issue has been fixed in version 1.0.29.
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.32, the built-in prompt and resource controllers perform no role checking. The mutating POST/PUT /api/prompts* and POST/PUT /api/resources* routes are attached to the authenticated router with no admin gate, and the handlers never read req.user. The DAO singletons they write are consulted first — ahead of any connected MCP server — for every session in handleGetPromptRequest / handleReadResourceRequest. A non-admin can therefore create, overwrite, and shadow global prompt templates and resources that all other users are served. The scored impact is the unauthorized integrity violation (creation/tampering/shadowing of globally-served records); stored prompt injection into other users' LLM sessions is a downstream consequence of that tampering. This issue has been patched in version 1.0.32.
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.31, when a bearer key with accessType: 'servers' (or 'custom') is used against a group route, isBearerKeyAllowedForRequest grants access to the entire group as long as any single server in that group appears in the key's allowedServers list — not only when every server the key is scoped to matches, and critically, without ever re-checking allowedServers again once the group-level connection is authorized. A key explicitly scoped to one specific server therefore also grants full access to every other server that happens to share a group with it, including servers the key was never authorized for. This issue has been patched in version 1.0.31.
CVE-2026-79747 is a Server-Side Request Forgery (SSRF) vulnerability in samanhappy's MCPHub prior to version 1.0.32. An authenticated non-admin user can register a server with an arbitrary URL, causing the hub to issue server-side requests without egress filtering, including to loopback and private IP ranges. The vulnerability allows full response reflection via the OpenAPI proxy path and blind requests via the SSE/streamable-http transport. This issue has been patched in version 1.0.32.
CVE-2026-79748 is a critical vulnerability in samanhappy's MCPHub prior to version 0.12.15. It involves missing authorization checks on POST /api/servers and PUT /api/servers/:name endpoints, allowing any authenticated non-admin user to execute arbitrary OS commands as the MCPHub server user. The flaw arises because these endpoints spawn configured processes without restricting command or argument inputs, potentially leading to full system compromise. The issue has been patched in version 0.12.15.
CVE-2026-79749 is a Server-Side Request Forgery (SSRF) vulnerability in samanhappy mcphub prior to version 1.0.32. The vulnerability arises because the SSRF guard does not check certain IPv6 transition address families, allowing attackers to bypass protections by encoding private IPv4 addresses within these IPv6 formats. This can enable unauthorized access to internal infrastructure. The issue has been patched in version 1.0.32.
MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own (list views and config edits enforce ownership), but the tool-execution API does not. Any authenticated non-admin user can invoke tools on MCP servers owned by other users — servers they cannot even see in GET /api/servers. Because connected MCP servers carry real capability (filesystem, HTTP fetch, cloud APIs with the owner's keys), this is cross-tenant compromise: demonstrated arbitrary host file read (/etc/passwd, another user's secrets) and SSRF. This issue has been patched in version 1.0.30.
CVE-2026-12587 is a high-severity vulnerability in Resamania Virtuagym involving the use of hard-coded credentials. The application uses a static 'badge_number' as an HMAC private key for generating physical access QR codes. This value is accessible via an API endpoint and can be extracted from the APK due to lack of code obfuscation. An attacker with access to this key and the cryptographic logic can generate valid QR codes indefinitely, bypassing password changes or logouts.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views – Complete Entry Management for Contact Form 7 cf7-views allows DOM-Based XSS.This issue affects CF7 Views – Complete Entry Management for Contact Form 7: from n/a through <= 3.2.2.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPForms views-for-wpforms-lite allows Blind SQL Injection.This issue affects Views for WPForms: from n/a through <= 3.4.6.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend views-for-ninja-forms allows Blind SQL Injection.This issue affects Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend: from n/a through <= 3.3.2.
next-intl provides internationalization for Next.js. Applications using the `next-intl` middleware prior to version 4.9.1with `localePrefix: 'as-needed'` could construct URLs where path handling and the WHATWG URL parser resolved a relative redirect target to another host (e.g.scheme-relative `//` or control characters stripped by the URL parser), so the middleware could redirect the browser off-site while the user still started from a trusted app URL. The problem has been patchedin `next-intl@4.9.1`.
The Citations tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'code' parameter in the 'ctdoi' shortcode in all versions up to, and including, 0.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.