{"uuid": "ebfd4105-7bbd-4efa-a6e6-0e424ee6b3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59726", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mrtb2w544s2m", "content": "A vulnerability named RufRoot, tracked as CVE-2026-59726, affects Ruflo versions before 3.16.3, allowing attackers to execute commands without authentication via the exposed Model Context Protocol (MCP) bridge. This flaw, with a CVSS score of 10.", "creation_timestamp": "2026-07-30T01:11:52.327101Z"}