mcp-gateway-registry

Search everything

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenNov 12, 2026
Last mentioned1d ago

Timeline

2 articles · newest first

AWS mcp-gateway-registry SSRF can reach internal services (CVE-2026-125926)

Authenticated registrars could aim the gateway at internal addresses, including cloud metadata, until version 1.35.0.

GBHackersNov 13, 05:01 UTC · 1d agoVulnerability 2 sourcesCVE-2026-1259261

AWS mcp-gateway-registry SSRF fixed in 1.35.0 (CVE-2026-125926)

An authenticated user who can register servers could make the gateway query internal services; exploitation is not confirmed.

Cyber Security Newsupdated Nov 13, 05:01 UTC · 1d agofirst Nov 12, 13:51 UTC · 2d agoVulnerability 2 sourcesCVE-2026-1259261 · 1 read

Related CVEs

by mentions

CVE-2026-1259266.3
Authenticated SSRF in Amazon mcp-gateway-registry before 1.35.0
published 2d agoAmazon mcp-gateway-registry

Appears with

AWSvendor · 2

Entities are extracted by the model from each article. First seen Nov 12, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.