VulnSocial

CVE-2026-7788Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The affected element is the function update_document/continue_document/delete_document/get_content of the file app/routes/document.py. Performing a manipulation of the argument DOCS_DIR/path results in path traversal. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 4 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 4 classified signals
  • 4 total mentions across 1 day

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-05-05: 4Technical Details · 2026-05-05: 205-05
Signal classification1 categories
Disclosure
4100.0%
Referenced assets4 URLs
Full discourse4 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-7788 A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The affected element is the function update_document/c… https://www.cve.org/CVERecord?id=CVE-2026-7788

    Post summary

    The message reports the discovery of CVE-2026-7788 in Axle-Bucamp MCP‑Docusaurus, identifying the affected commit and a function name, but provides no PoC, exploit, patch, or evidence of active exploitation.

    00030303
    57.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7788 Path Traversal in Axle-Bucamp MCP-Docusaurus Document Routes via DOCS_DIR Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7788

    Post summary

    CVE-2026-7788 is a disclosed path‑traversal vulnerability in Axle‑Bucamp MCP‑Docusaurus that allows manipulation via DOCS_DIR, but no PoC, exploit, active exploitation, or patch information is provided.

    0000054
    4.0K followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-7788 📊 Severity: 7.3 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-7788 #CVE-2026-7788 #CVE #High #CyberSecurity #InfoSec https://t.co/fzu5EIpBzE

    Post summary

    The tweet announces CVE‑2026‑7788 with a severity score of 7.3 and high risk, referencing the NVD entry but offering no exploit, patch, or detailed technical description.

    0000046
    151 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-7788 A security flaw has been discovered in Axle-Bucamp MCP-Docusaurus up to 404bc028e15ec304c9a045528560f4b5f27a17e0. The affected element is the function update_document/c… https://www.cve.org/CVERecord?id=CVE-2026-7788 ----- Traducción: CVE-2026-7788 Se … http://infoflow.cloud`

    Post summary

    A security flaw (CVE‑2026‑7788) has been identified in Axle‑Bucamp MCP‑Docusaurus, with only a brief reference to the affected function and a link to its CVE record.

    0000039
    75 followersView on X

Explore more

Back to dashboard