Back to the CVE list
CVE-2026-23744

Missing authentication in Mcpjam Inspector

CVSS score

9.8

EPSS probability

%67.5

Risk score

6.6

Published

9 mo ago

OverviewPublic Exploits (18)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
ctzisme/CVE-2026-23744
GitHub

A minimal proof-of-concept (PoC) for CVE-2026-23744, demonstrating an unauthenticated RCE in MCPJam Inspector (<= 1.4.2). (★1)

Public PoCSource updated: 27.03.2026 07:36:53
G
wvverez/CVE-2026-23744
GitHub

exploit para reverse shell en MCPJamInspector v1.4.2< por endpoint mal configurado (★1)

Public PoCSource updated: 18.09.2026 03:57:51
G
boroeurnprach/CVE-2026-23744-PoC
GitHub

CVE-2026-23744 PoC (★0)

Public PoCSource updated: 20.01.2026 17:05:02
G
suljov/CVE-2026-23744-Remote-Code-Execution-POC
GitHub

MCPJam inspector contains a remote code execution (★0)

Public PoCSource updated: 22.03.2026 07:38:16
G
fckoo/mcpjaminspector-unauth-rce
GitHub

CVE-2026-23744 RCE in MCPJam inspector <= 1.4.2 (★0)

Public PoCSource updated: 23.03.2026 10:05:52
G
FrenzisRed/CVE-2026-23744
GitHub

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept (POC (★0)

Public PoCSource updated: 24.03.2026 03:45:20
G
InzegoSec/CVE-2026-23744
GitHub

Exploit to MCPJam Inspector <=1.4.2 (★0)

Public PoCSource updated: 25.03.2026 04:28:32
G
z4yd3/PoC-CVE-2026-23744
GitHub

Remote Code Execution on MCPJam Inspector <= 1.4.2 (★0)

Public PoCSource updated: 25.03.2026 13:35:48
G
yassertioursi/htb-kobold-writeup
GitHub

Hack The Box — Kobold writeup. Exploiting CVE-2026-23744 (MCPJam Inspector unauthenticated RCE) to gain initial access as ben, then escaping via Docker group misconfiguration to root. (★0)

Public PoCSource updated: 25.03.2026 13:12:51
G
AhmadF77/CVE-2026-23744
GitHub

python script for exploiting CVE-2026-23744 (★0)

Public PoCSource updated: 27.03.2026 23:17:12
G
fcjaviergarcia/CVE-2026-23744-POC
GitHub

Proof of Concept (PoC) exploit for CVE-2026-23744, a vulnerability affecting MCPJam Inspector that allows remote command execution (RCE) through exposed internal debugging endpoints (★0)

Public PoCSource updated: 28.03.2026 00:35:49
G
0xg00se/CVE-2026-23744-script
GitHub

Exploit script for CVE-2026-23744 (★0)

Public PoCSource updated: 28.03.2026 03:06:07
G
d3vn0mi/CVE-2026-23744-POC
GitHub

Python PoC for CVE-2026-23744, unauthenticated RCE in MCP servers via the /api/mcp/connect serverConfig command field (default port 6274) (★0)

Public PoCSource updated: 11.07.2026 00:36:52
G
CyLock11/CVE-2026-23744
GitHub

CVE-2026-23744 - MCP Connect RCE via Unauthenticated Command Injection (★0)

Public PoCSource updated: 30.03.2026 01:34:12
G
luiskrnr/exploit-CVE-2026-23744
GitHub

MCPJam Inspector is a local-first development platform for MCP servers. In versions 1.4.2 (and earlier), a RCE flaw lets attackers send crafted HTTP request that installs an MCP server and runs code remotely, because the service listens on 0.0.0.0 (instead of 127.0.0.1) by default. (★0)

Public PoCSource updated: 10.04.2026 15:37:18
E
MCPJam Inspector - Remote Code Execution
Exploit-DB

MCPJam Inspector - Remote Code Execution

Exploit referenceSource updated: 07.07.2026 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23744.yaml
Nuclei

Nuclei: MCPJam Inspector - Remote Code Execution

Exploit reference
G
MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6
GitHub

https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6

Exploit reference

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-23744"