Vulnerabilities in maximhq

3 results

CVE-2026-86242HIGHUnauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked BuildsEPSS 3.6%CVE-2026-90898CRITICALBifrost unauthenticated remote code execution via MCP stdio client registrationEPSS 2.3%CVE-2026-55245HIGHBifrost: SSRF deny-list incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURLEPSS 0.6%