Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in tufantunc ssh-mcp up to 1.5.0. The affected element is the function shell.write of the file src/index.ts. Such manipulation of the argument Description leads to command injection. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-7039 A security vulnerability has been detected in tufantunc ssh-mcp up to 1.5.0. The affected element is the function shell.write of the file src/index.ts. Such manipulatio… https://www.cve.org/CVERecord?id=CVE-2026-7039
Post summary
The post announces the detection of CVE‑2026‑7039 in tufantunc ssh‑mcp, indicating the vulnerable shell.write function, but offers no PoC, exploit, or patch information.
CVE-2026-7039 Command Injection in tufantunc ssh-mcp Up To 1.5.0 via shell.write... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7039 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
A command injection vulnerability (CVE‑2026‑7039) affects tufantunc ssh‑mcp up to version 1.5.0 via shell.write; no PoC or active exploitation details are provided.