VulnSocial

CVE-2026-94047Disclosure

LOWCVSS 2.1 · LOW

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Upgrading to version 1.0.33 is sufficient to resolve this issue. The identifier of the patch is 18a4467bc4ec6390b1f841d8a468a37e9922f837. It is advisable to upgrade the affected component.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-266CWE-269

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-20); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-20: 1Mentions · 2026-10-20: 1PoC Mentioned / Linked · 2026-10-20: 1Patch / Workaround · 2026-10-20: 1Technical Details · 2026-10-20: 109-2010-20
Signal classification2 categories
Disclosure
150.0%
PoC
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-201
Disclosure1
2026-10-201
PoC1
Full discourse2 posts
  • Hugo | DevOps | Cybersecurity@HugoValters
    PoC

    CVE-2026-94047: improper privilege management in samanhappy MCPHub up to 1.0.32, remotely exploitable and public exploit out. CVSS 6.3. Upgrade to 1.0.33 now. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-94047/ #Saman #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    Post summary

    The text announces CVE-2026-94047 as an improper privilege management flaw in samanhappy MCPHub with a public exploit available and CVSS 6.3, while urging an upgrade to version 1.0.33 as remediation.

    0000031
    1.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-94047 A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateSer… https://www.cve.org/CVERecord?id=CVE-2026-94047

    Post summary

    The post announces CVE-2026-94047 affecting samanhappy MCPHub, specifying the vulnerable function importTemplate, but provides no information on PoC, exploits, patches, or active exploitation.

    00000817
    58.1K followersView on X

Explore more

Back to dashboard