Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privileges.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-14 | 1 | Disclosure1 |
| 2026-04-15 | 1 | Active Exploitation1 |
| 2026-04-19 | 1 | Disclosure1 |
Attention, elevated activities detected targeting MCPHub (CVE-2025-13822) https://vuldb.com/vuln/357303/cti
Post summary
Alert announces detected active exploitation activity targeting MCPHub for CVE-2025-13822, with no additional technical or patch details provided.
CVE-2025-13822 MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated att… https://www.cve.org/CVERecord?id=CVE-2025-13822
Post summary
CVE-2025-13822 affects MCPHub versions below 0.11.0 by enabling authentication bypass through unprotected endpoints; no PoC, exploit code, active exploitation, or patch information is presented.
CVE-2025-13822 Authentication Bypass in MCPHub Below Version 0.11.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-13822 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The text announces the presence of CVE-2025-13822, describing an authentication bypass in MCPHub versions below 0.11.0, and provides links to vulnerability details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mcphubx | mcphub | - | - | - |