CVE-2026-23744: fallo crítico en MCPJam inspector
REC in MCPJam inspector due to HTTP Endpoint exposes
Publicada el
97Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 9.8epss 68%
de la publicación al arma4 días
Publicada en NVD16 ene
1ª PoC+4d
metasploit16 ene
VulnCheck+33d
probabilidad de explotación
68%top 1% de las CVE
explotación observada
síVulnCheck
91 exploit(s) público(s)
MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
MCPJam · inspectorPoCs públicas encontradas — 91
exploitdbwww.exploit-db.com/exploits/52625no verificadogithubgithub.com/suljov/CVE-2026-23744-Remote-Code-Execution-POC★ 12githubgithub.com/boroeurnprach/CVE-2026-23744-PoC★ 12githubgithub.com/ibreakthingsforaliving/CVE-2026-23744-PoC★ 8githubgithub.com/CerberusMrXi/CVE-2026-23744-MCPJam-Exploit★ 6githubgithub.com/FrenzisRed/CVE-2026-23744★ 4githubgithub.com/thisisish/HTB-DevHub★ 4githubgithub.com/luiskrnr/exploit-CVE-2026-23744★ 4githubgithub.com/Mluex0/CVE-2026-23744-PoC★ 3githubgithub.com/alisster00/CVE-2026-23744-RCE★ 1githubgithub.com/SrGinebras/CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2★ 1githubgithub.com/rohit-sundar/cve-2026-23744★ 1githubgithub.com/wvverez/CVE-2026-23744★ 1githubgithub.com/ctzisme/CVE-2026-23744★ 1githubgithub.com/0xg00se/CVE-2026-23744-script★ 1githubgithub.com/InzegoSec/CVE-2026-23744★ 1githubgithub.com/ozcanpng/CVE-2026-23744★ 1githubgithub.com/01xJB/CVE-2026-23744-POC★ 0githubgithub.com/p1ctur3p3rf3ct/CVE-2026-23744★ 0githubgithub.com/d3vn0mi/CVE-2026-23744-POC★ 0githubgithub.com/sbouabid-sec/CVE-2026-23744-POC★ 0githubgithub.com/nullRoot-Red/CVE-2026-23744★ 0githubgithub.com/itsC1SCO/mcpjam-to-root★ 0githubgithub.com/afifudinmtop/MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744★ 0githubgithub.com/diamorphine666/CVE-2026-23744-exploit★ 0githubgithub.com/H1sok444/CVE-2026-23744-PoC★ 0githubgithub.com/fckoo/mcpjaminspector-unauth-rce★ 0githubgithub.com/z4yd3/PoC-CVE-2026-23744★ 0githubgithub.com/CyLock11/CVE-2026-23744★ 0githubgithub.com/Least-Significant-Bit/CVE-2026-23744★ 0githubgithub.com/MrR0b0t19/CVE-2026-23744-PoC★ 0githubgithub.com/keeieb79/CVE-2026-23744-poc★ 0githubgithub.com/oryk0/CVE-2026-23744★ 0githubgithub.com/timgad794/DevHub-HTB-Walkthrough★ 0githubgithub.com/rootdirective-sec/CVE-2026-23744-Lab★ 0githubgithub.com/AhmadF77/CVE-2026-23744★ 0githubgithub.com/fcjaviergarcia/CVE-2026-23744-POC★ 0githubgithub.com/kennedy-aikohi/mcpjam-cve-2026-23744-validator★ 0githubgithub.com/sonnelon/CVE-2026-23744-PoC★ 0githubgithub.com/m2sousa/CVE-2026-23744★ 0githubgithub.com/daemoncibsec/mcpExec★ 0githubgithub.com/jf-gondim/mcp-pwn★ 0githubgithub.com/avivyap/CVE-2026-23744★ 0githubgithub.com/Dahalsamir/CVE-2026-23744-MCPJAM-RCE-exploit★ 0githubgithub.com/0x77FSec/CVE-2026-23744★ 0vulncheckvulncheck.com/xdb/bc149cf30a42no verificadovulncheckvulncheck.com/xdb/310ef3751585no verificadovulncheckvulncheck.com/xdb/3b7e794b8722no verificadovulncheckvulncheck.com/xdb/6d13a01d3c1bno verificadovulncheckvulncheck.com/xdb/accf494315beno verificadovulncheckvulncheck.com/xdb/002265a51caano verificadovulncheckvulncheck.com/xdb/55939ca064efno verificadovulncheckvulncheck.com/xdb/ea79ce610d96no verificadovulncheckvulncheck.com/xdb/11a2aa8051bfno verificadovulncheckvulncheck.com/xdb/5b367c011e57no verificadovulncheckvulncheck.com/xdb/156744a61ce5no verificadovulncheckvulncheck.com/xdb/f19a9287d9f4no verificadovulncheckvulncheck.com/xdb/22e992c6eba1no verificadovulncheckvulncheck.com/xdb/0ec514f010abno verificadovulncheckvulncheck.com/xdb/18ed655d7d3ano verificadovulncheckvulncheck.com/xdb/51473bb332acno verificadovulncheckvulncheck.com/xdb/558aeacb39afno verificadovulncheckvulncheck.com/xdb/bd0a0368bc9fno verificadovulncheckvulncheck.com/xdb/04d2eb59baa0no verificadovulncheckvulncheck.com/xdb/19bd1eda71f6no verificadovulncheckvulncheck.com/xdb/e355d7728e67no verificadovulncheckvulncheck.com/xdb/754d28417536no verificadovulncheckvulncheck.com/xdb/bb332d214356no verificadovulncheckvulncheck.com/xdb/d92668d48256no verificadovulncheckvulncheck.com/xdb/d2cb1ba27705no verificadovulncheckvulncheck.com/xdb/14ec643809a4no verificadovulncheckvulncheck.com/xdb/87b1467b8018no verificadovulncheckvulncheck.com/xdb/5c31e12d4578no verificadovulncheckvulncheck.com/xdb/187f9131ea4ano verificadovulncheckvulncheck.com/xdb/7df764e04e42no verificadovulncheckvulncheck.com/xdb/4e9846e1158dno verificadovulncheckvulncheck.com/xdb/7633d01c9ed5no verificadovulncheckvulncheck.com/xdb/f90556007227no verificadovulncheckvulncheck.com/xdb/9362558c0b48no verificadovulncheckvulncheck.com/xdb/86e37564190ano verificadovulncheckvulncheck.com/xdb/1e9f5d967258no verificadovulncheckvulncheck.com/xdb/2f8b31ea51b6no verificadovulncheckvulncheck.com/xdb/f5a69656dee5no verificadovulncheckvulncheck.com/xdb/8e55de8d7277no verificadovulncheckvulncheck.com/xdb/5dfd4e5cb15fno verificadovulncheckvulncheck.com/xdb/846d968554d1no verificadovulncheckvulncheck.com/xdb/72377de61f0cno verificadovulncheckvulncheck.com/xdb/cfc3738e7fc3no verificadovulncheckvulncheck.com/xdb/a790926d28fano verificadovulncheckvulncheck.com/xdb/cbd95f6b01c3no verificadovulncheckvulncheck.com/xdb/4f7a02d1d4cbno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.