Skip to content

CVE-2026-110278

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 14, 2026
Last Seen
November 14, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

IBM ContextForge MCP Gateway Vulnerabilities Disclosed60.6

IBM disclosed two vulnerabilities in the ContextForge MCP Gateway, CVE-2026-110279 and CVE-2026-110278, both rated high severity. CVE-2026-110279 allows improper credential handling through the X-Upstream-Authorization header, potentially enabling authenticated users to bypass permission controls. C...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachCWE-200 - Exposure of Sensitive InformationCWE-294 - Authentication Bypass by Capture-replay