CVE-2026-19263Disclosure

LOWCVSS 6.9 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted element is an unknown function of the file mcp-bridge.js of the component Servers Endpoint. Performing a manipulation of the argument command/args results in command injection. It is possible to initiate the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The pull request to fix this issue awaits acceptance.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-77

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 2 classified signals
General: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets2 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud46d
Disclosure
🚨*CVE* CVE-2026-19263 A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted element is an unknown function of the file mcp-bri… https://www.cve.org/CVERecord?id=CVE-2026-19263 ----- Traducción: Se encontró una vu… http://infoflow.cloud`
Post summary
The post announces the discovery of CVE-2026-19263 in the INQUIRELAB mcp-bridge-api, directing readers to the official CVE record for more information.
0000038
98 followersView on X
CVE@CVEnew46d
General
CVE-2026-19263 A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted element is an unknown function of the file mcp-bri… https://www.cve.org/CVERecord?id=CVE-2026-19263
Post summary
The short post notes that CVE-2026-19263 appears in the INQUIRELAB mcp-bridge-api but offers no further technical details, exploits, or mitigation information.
00000839
57.9K followersView on X
CyberSignal | Cybersecurity News@XQOPTRX46d
Disclosure
🤖 MCP server hit by command-injection vulnerability CVE-2026-19263 — CVSS 7.3 A newly disclosed vulnerability affects INQUIRELAB mcp-bridge-api. The issue involves command injection through the MCP server endpoint and was publicly cataloged on August 8. 🔎 Source: CVE / Vulners #MCP #AISecurity #CommandInjection #CVE #CyberSecurity
Post summary
A newly disclosed command‑injection vulnerability (CVE‑2026‑19263, CVSS 7.3) affecting the INQUIRELAB mcp-bridge-api has been published; no PoC, exploit, patch, or active exploitation details are provided.
0000036
34 followersView on X

Explore more

Back to dashboard