{"metadata": {"vulnerability": "CVE-2026-53509", "count": 13, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 7}}, "data": [{"timestamp": "2026-06-09T17:05:25.060Z", "date_only": false, "value": "2026-06-09T17:05:25.060Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-53509", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-07T19:35:57Z", "date_only": false, "value": "2026-07-07T19:35:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G84H-J7JJ-X32P", "record": "GHSA-G84H-J7JJ-X32P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-07T19:35:57Z", "date_only": false, "value": "2026-07-07T19:35:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G84H-J7JJ-X32P", "record": "GHSA-G84H-J7JJ-X32P", "field": "modified"}, {"timestamp": "2026-08-21T21:21:20.897Z", "date_only": false, "value": "2026-08-21T21:21:20.897Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-53509", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-21T21:21:20.897Z", "date_only": false, "value": "2026-08-21T21:21:20.897Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-53509", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-21T21:35:04.552Z", "date_only": false, "value": "2026-08-21T21:35:04.552283Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-53509", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-21T21:35:04.552Z", "date_only": false, "value": "2026-08-21T21:35:04.552283Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-53509", "record": "FKIE_CVE-2026-53509", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-21T21:42:22.500Z", "date_only": false, "value": "2026-08-21T21:42:22.500Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-53509", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-21T21:42:22.500Z", "date_only": false, "value": "2026-08-21T21:42:22.500Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-53509", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-21T22:16:38.993Z", "date_only": false, "value": "2026-08-21T22:16:38.993", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-53509", "record": "FKIE_CVE-2026-53509", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-22T15:32:08.331Z", "date_only": false, "value": "2026-09-22T15:32:08.331956Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/3ba8e1fcc936f8ea3f0b915b4e9e571b", "record": "CVE-2026-53509", "field": "creation_timestamp", "uuid": "8e495bff-0ce6-46b5-8ac0-90845d2cce43", "content": "# CVE-2026-61612: CVE-2026-61612: Server-Side Request Forgery Bypass via DNS Resolution in CKAN MCP Server\n\n> **CVSS Score:** 5.7\n> **Published:** 2026-09-22\n> **Full Report:** https://cvereports.com/reports/CVE-2026-61612\n\n## Summary\nAn input validation bypass in the CKAN MCP Server (NPM package @aborruso/ckan-mcp-server) prior to version 0.4.108 allows remote attackers to perform Server-Side Request Forgery (SSRF). The application's server URL validation mechanism checked hostnames only as literal strings without performing pre-connection DNS resolution. An attacker can bypass these checks using hostnames that resolve to loopback, private, or link-local IP addresses, including the AWS Instance Metadata Service (IMDS). This is the third documented bypass of this protection mechanism, succeeding previous incomplete mitigations in CVE-2026-33060 and CVE-2026-53509.\n\n## TL;DR\nA Server-Side Request Forgery (SSRF) vulnerability in @aborruso/ckan-mcp-server before v0.4.108 allows low-privilege remote attackers to query local or internal network endpoints, including AWS IMDS, by passing domains that resolve to restricted IPs, bypassing the string-only validation checks.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity Score**: 5.7 (Medium)\n- **EPSS Score**: 0.00221 (Percentile: 12.95%)\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Node.js applications running @aborruso/ckan-mcp-server version < 0.4.108\n\n## Mitigation\n\n- Upgrade @aborruso/ckan-mcp-server to version 0.4.108 or higher to enforce DNS-resolved IP checks.\n- Implement outbound network firewall constraints (egress filtering) to block requests to loopback addresses, private networks, and cloud metadata targets.\n- Enable the domain validation allowlist feature using the CKAN_ALLOWED_DOMAINS environment variable to restrict outbound connections to approved targets.\n\n**Remediation Steps:**\n1. Run 'npm install @aborruso/ckan-mcp-server@latest' to update the package to v0.4.108 or higher.\n2. Configure environment configuration using 'export CKAN_ALLOWED_DOMAINS=\"data.gov,open.canada.ca,dati.gov.it\"' to limit target access.\n3. Configure cloud security group or local iptables firewall policies to deny traffic from the MCP server container to 169.254.169.254 and 127.0.0.1.\n\n## References\n\n- [GitHub Security Advisory GHSA-798p-78g2-v556](https://github.com/ondata/ckan-mcp-server/security/advisories/GHSA-798p-78g2-v556)\n- [Fix Commit in Repository](https://github.com/ondata/ckan-mcp-server/commit/bb7439b553b9f965adc3d43bcd415c42eebe2f40)\n- [Release Tag v0.4.108](https://github.com/ondata/ckan-mcp-server/releases/tag/v0.4.108)\n- [GitHub Advisory Database Reference (CVE-2026-33060)](https://github.com/advisories/GHSA-3xm7-qw7j-qc8v)\n- [GitHub Advisory Database Reference (CVE-2026-53509)](https://github.com/advisories/GHSA-g84h-j7jj-x32p)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-61612) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/3ba8e1fcc936f8ea3f0b915b4e9e571b"}, {"timestamp": "2026-09-22T16:04:25.960Z", "date_only": false, "value": "2026-09-22T16:04:25.960898Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mw4m4nub4f2z", "record": "CVE-2026-53509", "field": "creation_timestamp", "uuid": "5d7750eb-8455-4bad-b1e9-3c413165c7b6", "content": "\ud83d\udea8 EUVD-2026-84031\n\ud83d\udcca 5.7/10\n\ud83c\udfe2 ondata\n\n\ud83d\udcdd @aborruso/ckan-mcp-server has SSRF via DNS-name \u2192 internal IP \u2014 incomplete fix of CVE-2026-53509\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-84031\n\n#cybersecurity #infosec #cve #euvd", "url": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mw4m4nub4f2z"}, {"timestamp": "2026-10-12T16:10:00.220Z", "date_only": false, "value": "2026-10-12T16:10:00.220", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-53509", "record": "FKIE_CVE-2026-53509", "field": "lastModified"}], "metrics": {"as_of": "2026-10-28T15:07:40.295Z", "anchors": {"origin": {"timestamp": "2026-07-07T19:35:57Z", "date_only": false, "value": "2026-07-07T19:35:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G84H-J7JJ-X32P", "record": "GHSA-G84H-J7JJ-X32P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-07T19:35:57Z", "date_only": false, "value": "2026-07-07T19:35:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G84H-J7JJ-X32P", "record": "GHSA-G84H-J7JJ-X32P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 9747103.295051, "hours": 2707.528693069722, "days": 112.81369554457174, "min_seconds": 9747103.295051, "max_seconds": 9747103.295051, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-07T19:35:57Z", "date_only": false, "value": "2026-07-07T19:35:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G84H-J7JJ-X32P", "record": "GHSA-G84H-J7JJ-X32P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T15:07:40.295Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}