VulnSocial

CVE-2026-14748Disclosure

LOWCVSS 2.1 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in AIAnytime Awesome-MCP-Server up to a884bb51bcd99e08e14fd712c749d55d9d9a13ab. Affected by this issue is some unknown functionality of the file mcp-wiki/src/mcp_wiki/server.py of the component mcp-wiki/wiki-summary. This manipulation of the argument url causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-06: 207-06
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-14748 A flaw has been found in AIAnytime Awesome-MCP-Server up to a884bb51bcd99e08e14fd712c749d55d9d9a13ab. Affected by this issue is some unknown functionality of the file… https://www.cve.org/CVERecord?id=CVE-2026-14748 ----- Traducción: Se ha encontrado u… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑14748 in AIAnytime Awesome‑MCP‑Server but provides no technical depth, exploitation evidence, or remediation guidance.

    0000051
    92 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-14748 A flaw has been found in AIAnytime Awesome-MCP-Server up to a884bb51bcd99e08e14fd712c749d55d9d9a13ab. Affected by this issue is some unknown functionality of the file… https://www.cve.org/CVERecord?id=CVE-2026-14748

    Post summary

    This text announces the discovery of CVE-2026-14748 in AIAnytime Awesome-MCP-Server, noting an unknown file functionality issue without providing PoC, exploit, patch, or technical specifics.

    00000772
    57.7K followersView on X

Explore more

Back to dashboard