{"uuid": "ca1a2519-7b5c-419d-a8bb-b52a44b824a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11720", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6gbwnwhh22", "content": "CVE-2026-11720 - mcp_toolbox_for_databases\nThe Google MCP Toolbox HTTP tool can make unauthorized API requests to unintended endpoints on the same target host. This is because an attacker can manipulate the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#google #Golang #CVE #infosec", "creation_timestamp": "2026-09-10T16:00:08.117521Z"}