CVE-2026-53709
MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery
CVSS score
9.8
EPSS probability
%0.5
Risk score
0.0
Published
2 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2026-9198 Actively exploited
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
I
Patch verified Public Exploits:11EPSS %29
9.8
CVE-2025-13915
Vulnerability in IBM API Connect
I
Patch status unknownEPSS %9
6.5
CVE-2013-3993 Actively exploited
Path traversal in N/a
N
WorkaroundEPSS %5
10.0
CVE-2026-13773
Server-side request forgery in IBM Websphere Extreme Scale
I
Patch status unknownEPSS %6
9.9
CVE-2026-19295
Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement
I
Patch verified Public Exploits:2EPSS %3
8.5
CVE-2026-17179
IBM Db2 Mirror for i is affected by multiple vulnerabilities
I
Patch verifiedEPSS %3
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-53709"