{"vulnerability": "cve-2026-4255", "sightings": [{"uuid": "ff0fb7ea-ce9a-4360-a0c5-b6fc891cf3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4255", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116237679238327076", "content": "", "creation_timestamp": "2026-03-16T07:30:38.099563Z"}, {"uuid": "149ad836-05de-4629-954e-a5628480a042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42556", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mleultxumj2z", "content": "\ud83d\udfe0 CVE-2026-42556 - High (8.9)\n\nPostiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42556/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-08T23:20:15.909992Z"}, {"uuid": "ca2d1c28-b775-4f7b-a2f2-dd990536b1e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42556", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlf3rb64qt2e", "content": "CVE-2026-42556 - Postiz stored XSS in public preview page\nCVE ID : CVE-2026-42556\n \n Published : May 8, 2026, 11:16 p.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : Postiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any authenticated user ...", "creation_timestamp": "2026-05-09T01:28:33.040247Z"}, {"uuid": "9120ab1a-c878-4577-b728-290540f5a4f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42555", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mm2tm4nnz62z", "content": "\ud83d\udd34 CVE-2026-42555 - Critical (9.1)\n\nValtimo is an open-source business process automation platform. com.ritense.valtimo:document from...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42555/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-17T17:01:05.265395Z"}, {"uuid": "a45a913a-3437-455e-bded-0118438c596b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42559", "type": "seen", "source": "https://gist.github.com/alon710/1478335359dc82e8637524c3acdbcdae", "content": "# GHSA-FVH2-GM75-J4J7: CVE-2026-42559: DNS Rebinding and CSRF in Model Context Protocol (MCP) HTTP Transport\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-05-18\n> **Full Report:** https://cvereports.com/reports/GHSA-FVH2-GM75-J4J7\n\n## Summary\nThe Model Context Protocol (MCP) Rust SDK (`rmcp`), a transitive dependency of the `dynoxide` database proxy, contains a high-severity vulnerability in its streamable HTTP server transport. The component fails to properly validate incoming HTTP `Host` headers, permitting DNS rebinding and Cross-Origin Request Forgery (CSRF) attacks against locally running database proxies.\n\n## TL;DR\nA missing Host header validation in the rmcp HTTP transport allows attackers to execute arbitrary MCP tools on local dynoxide instances via DNS rebinding, leading to unauthenticated local database access.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CVSS Score**: 8.8\n- **EPSS Score**: 0.00018\n- **CWE ID**: CWE-346, CWE-350\n- **Attack Vector**: Network (DNS Rebinding)\n- **Exploit Status**: Proof of Concept\n- **Impact**: Data Exfiltration and Manipulation\n\n## Affected Systems\n\n- dynoxide-rs (crates.io)\n- dynoxide (npm)\n- rmcp (Model Context Protocol Rust SDK)\n- **dynoxide**: 0.9.3 - 0.9.12 (Fixed in: `0.9.13`)\n- **rmcp**: < 1.4.0 (Fixed in: `1.4.0`)\n\n## Mitigation\n\n- Upgrade the dynoxide binary to version 0.9.13 or later.\n- Upgrade the rmcp crate dependency to version 1.4.0 or later.\n- Disable the HTTP transport by using the default stdio transport (dynoxide mcp without --http).\n\n**Remediation Steps:**\n1. Identify all local installations of dynoxide.\n2. Update the dynoxide package using cargo install dynoxide-rs --force or npm update dynoxide.\n3. Verify the version by running dynoxide --version.\n4. Ensure start scripts do not include the --http flag if using older versions.\n\n## References\n\n- [NVD CVE Record: CVE-2026-42559](https://nvd.nist.gov/vuln/detail/CVE-2026-42559)\n- [RustSec Advisory: RUSTSEC-2026-0140](https://rustsec.org/advisories/RUSTSEC-2026-0140.html)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-FVH2-GM75-J4J7) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-05-18T17:40:50.000000Z"}, {"uuid": "b42e01c7-7021-478c-93ff-5d7778a07c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42554", "type": "published-proof-of-concept", "source": "https://github.com/gofiber/fiber/security/advisories/GHSA-qjv7-627w-8qjv", "content": "", "creation_timestamp": "2026-04-25T13:08:32.000000Z"}, {"uuid": "003666cd-5d5c-4542-bd09-f1e87f06cdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42551", "type": "published-proof-of-concept", "source": "https://github.com/flightphp/core/security/advisories/GHSA-vxrr-w42w-w76g", "content": "", "creation_timestamp": "2026-04-29T13:03:34.000000Z"}, {"uuid": "99097ba9-cd5a-4b42-b564-3bcc04c982c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42552", "type": "published-proof-of-concept", "source": "https://github.com/flightphp/core/security/advisories/GHSA-qrch-52m5-vv85", "content": "", "creation_timestamp": "2026-04-29T13:02:57.000000Z"}, {"uuid": "0e956f75-9b9b-4e9b-bd81-eca486711489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42550", "type": "published-proof-of-concept", "source": "https://github.com/flightphp/core/security/advisories/GHSA-xwqr-rcqg-22mr", "content": "", "creation_timestamp": "2026-04-29T13:03:28.000000Z"}, {"uuid": "8eec8f7d-fe9e-491c-8dd7-0f3a5b1a17f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4255", "type": "seen", "source": "https://bsky.app/profile/secqube.com/post/3mtkmrzqdec2x", "content": "CVE-2026-4255 - DLL Injection Privilege Escalation scq.ms/4cJz7fP", "creation_timestamp": "2026-08-21T01:38:03.940540Z"}, {"uuid": "40519821-f193-4327-aaa2-7b0ba1fa471a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42558", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mny4wzvgc72p", "content": "\ud83d\udfe0 CVE-2026-42558 - High (7.6)\n\nXibo is an open source digital signage platform with a web content management system and Windows ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42558/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T02:00:40.157707Z"}, {"uuid": "16815e14-d9f5-48cb-a405-02c04352d0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42558", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mny7yw76252o", "content": "Xibo CMS\uff084.4.2\u672a\u6e80\uff09\u306eStored XSS\u3068Iframe Sandbox escape\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001DataSet\u6a29\u9650\u3092\u6301\u3064\u30e6\u30fc\u30b6\u30fc\u304cXSS\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-42558 CVSS 7.6 | HIGH", "creation_timestamp": "2026-06-11T02:55:23.691274Z"}, {"uuid": "06f4daaa-ba6e-4276-8d33-43ea2302817a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42559", "type": "seen", "source": "https://t.me/GithubRedTeam/101443", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42559\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a joaovicdev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-06 22:33:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDocker lab + Python PoC for CVE-2026-42559 - DNS rebinding via unvalidated Host header in the rmcp (Rust MCP SDK) Streamable HTTP server transport\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T05:00:07.580689Z"}, {"uuid": "741b5195-be85-433f-a8f6-c3b0438fad27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42559", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101443", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42559\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a joaovicdev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-06 22:33:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDocker lab + Python PoC for CVE-2026-42559 - DNS rebinding via unvalidated Host header in the rmcp (Rust MCP SDK) Streamable HTTP server transport\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:49.040709Z"}, {"uuid": "37f54b1b-6419-4383-9752-a5f7d36e30c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42556", "type": "seen", "source": "https://t.me/shimiscyberworld/1328", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-09\n\n\ud83d\udcca 23 vulnerabilities detected today \u2014 7 \ud83d\udd34 Critical, 16 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42298 (10) \u2014 CVE-2026-42298: Critical RCE in Postiz AI Scheduling Tool\n  \u2022 CVE-2026-42454 (9.9) \u2014 Termix RCE via Container ID Injection (CVE-2026-42454)\n  \u2022 CVE-2026-42302 (9.8) \u2014 CVE-2026-42302: FastGPT Agent Sandbox RCE\n  \u2022 CVE-2026-42193 (9.1) \u2014 CVE-2026-42193: Plunk Email Platform Critical\u2026\n  \u2022 CVE-2026-42354 (9.1) \u2014 Sentry SAML SSO Critical Vulnerability Allows Account\u2026\n  \u2022 CVE-2026-44313 (9.1) \u2014 Linkwarden SSRF Vulnerability (CVE-2026-44313) Allows\u2026\n  \u2022 CVE-2026-42560 (9.1) \u2014 CVE-2026-42560: Critical Patreon OAuth Flaw Merges User\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-42556 (8.9) \u2014 CVE-2026-42556: Postiz AI Tool Vulnerability Allows Stored\u2026\n  \u2022 CVE-2026-42205 (8.8) \u2014 CVE-2026-42205: Avo Framework Privilege Escalation in Ruby\u2026\n  \u2022 CVE-2026-42352 (8.6) \u2014 pygeoapi RCE: OGC API Vulnerability Exposes Internal\u2026\n  \u2022 CVE-2026-41705 (8.6) \u2014 CVE-2026-41705: Spring AI MilvusVectorStore Vulnerable to\u2026\n  \u2022 CVE-2026-42452 (8.1) \u2014 Termix CVE-2026-42452 Bypasses 2FA with Temporary JWT\n  \u2022 CVE-2026-6665 (8.1) \u2014 PgBouncer SCRAM Vulnerability (CVE-2026-6665) Allows Stack\u2026\n  \u2022 CVE-2026-42296 (8.1) \u2014 CVE-2026-42296: Argo Workflows Bypass Grants Host Network\u2026\n  \u2022 CVE-2026-41520 (7.9) \u2014 CVE-2026-41520: Cilium Bugtool Leaks Sensitive WireGuard\u2026\n  \u2022 CVE-2026-42301 (7.8) \u2014 CVE-2026-42301: Malicious Code Execution Via pyp2spec RPM\u2026\n  \u2022 CVE-2026-42345 (7.7) \u2014 FastGPT Vulnerability: Cloud Metadata Bypass via URL\u2026\n  \u2026 and 6 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:10.934782Z"}, {"uuid": "75fbd55b-843b-4a3c-b21f-8144b077bbc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42556", "type": "seen", "source": "https://t.me/shimiscyberworld/1328", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-09\n\n\ud83d\udcca 23 vulnerabilities detected today \u2014 7 \ud83d\udd34 Critical, 16 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42298 (10) \u2014 CVE-2026-42298: Critical RCE in Postiz AI Scheduling Tool\n  \u2022 CVE-2026-42454 (9.9) \u2014 Termix RCE via Container ID Injection (CVE-2026-42454)\n  \u2022 CVE-2026-42302 (9.8) \u2014 CVE-2026-42302: FastGPT Agent Sandbox RCE\n  \u2022 CVE-2026-42193 (9.1) \u2014 CVE-2026-42193: Plunk Email Platform Critical\u2026\n  \u2022 CVE-2026-42354 (9.1) \u2014 Sentry SAML SSO Critical Vulnerability Allows Account\u2026\n  \u2022 CVE-2026-44313 (9.1) \u2014 Linkwarden SSRF Vulnerability (CVE-2026-44313) Allows\u2026\n  \u2022 CVE-2026-42560 (9.1) \u2014 CVE-2026-42560: Critical Patreon OAuth Flaw Merges User\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-42556 (8.9) \u2014 CVE-2026-42556: Postiz AI Tool Vulnerability Allows Stored\u2026\n  \u2022 CVE-2026-42205 (8.8) \u2014 CVE-2026-42205: Avo Framework Privilege Escalation in Ruby\u2026\n  \u2022 CVE-2026-42352 (8.6) \u2014 pygeoapi RCE: OGC API Vulnerability Exposes Internal\u2026\n  \u2022 CVE-2026-41705 (8.6) \u2014 CVE-2026-41705: Spring AI MilvusVectorStore Vulnerable to\u2026\n  \u2022 CVE-2026-42452 (8.1) \u2014 Termix CVE-2026-42452 Bypasses 2FA with Temporary JWT\n  \u2022 CVE-2026-6665 (8.1) \u2014 PgBouncer SCRAM Vulnerability (CVE-2026-6665) Allows Stack\u2026\n  \u2022 CVE-2026-42296 (8.1) \u2014 CVE-2026-42296: Argo Workflows Bypass Grants Host Network\u2026\n  \u2022 CVE-2026-41520 (7.9) \u2014 CVE-2026-41520: Cilium Bugtool Leaks Sensitive WireGuard\u2026\n  \u2022 CVE-2026-42301 (7.8) \u2014 CVE-2026-42301: Malicious Code Execution Via pyp2spec RPM\u2026\n  \u2022 CVE-2026-42345 (7.7) \u2014 FastGPT Vulnerability: Cloud Metadata Bypass via URL\u2026\n  \u2026 and 6 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:40.976123Z"}]}