Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Medium | 5.9 | CVE-2026-57207 |
NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox
netboxlabs, NetBoxnetboxlabs netbox-mcp-server, NetBox MCP Server
|
NVD | |||
|
CVE-2026-57207NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox
Executive summaryThe advisory covers NetBox MCP Server, a read-only Model Context Protocol server for NetBox, in release v1.2.1. The text is mostly release notes and does not state how severe the flaw is or what the vendor recommends beyond the listed updates. Impact and severity are not stated. Technical summaryThe advisory is largely a changelog for NetBox MCP Server v1.2.1 and names a reporter (@fortress07) for responsible disclosure, but it does not describe the vulnerability class, attack vector, or preconditions. Affected versions are not stated beyond the release v1.2.1 itself, and no fixed version is explicitly identified as remediating a specific flaw. The changelog lists dependency bumps for cryptography, pyjwt, python-multipart, gitpython and pygments, and adds optional bearer token authentication for HTTP transport. No workaround, exploitation status, CVSS score, or detection guidance is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/netboxlabs/netbox-mcp-server/releases/tag/v1.2.1 Impact if exploitedConfidentialityHigh IntegrityNone AvailabilityNone
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N AffectsnetboxlabsNetBoxnetboxlabs netbox-mcp-serverNetBox MCP Server
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||