{"vulnerability": "cve-2026-5563", "sightings": [{"uuid": "36cd9f15-f9d4-4b1c-9a20-bad929840269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miqpjot2wm23", "content": "", "creation_timestamp": "2026-04-05T12:05:56.451588Z"}, {"uuid": "1b2aa770-47e5-46d7-93d2-d16bd734254f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55634", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muaij4m5ra2p", "content": "CVE-2026-55634 - pimcore/pimcore\nIf you use Pimcore versions older than the latest releases, a user who can log in and has permission to work with objects can trick the system into creating PHP code inside its\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pimcore #PHP #CVE #infosec", "creation_timestamp": "2026-08-29T18:20:04.379980Z"}, {"uuid": "5cb271d1-3c8a-4c7c-b542-425b22a7e1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55636", "type": "published-proof-of-concept", "source": "https://github.com/projectcapsule/capsule/security/advisories/GHSA-gwxr-7h77-7777", "content": "", "creation_timestamp": "2026-06-17T04:48:18.000000Z"}, {"uuid": "0e01eeba-8366-4fa4-b87c-7f6b175eb4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55635", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3sfjtcli2z", "content": "CVE-2026-55635 - DataEase: Authenticated SQL Injection in Chart Quota Filters\nCVE ID : CVE-2026-55635\n \n Published : July 7, 2026, 9:17 p.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, chart quota...", "creation_timestamp": "2026-07-07T23:52:56.304105Z"}, {"uuid": "69ca79ce-1db9-49ee-abf4-8f95731fd140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55633", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3sn7h6ac2t", "content": "CVE-2026-55633 - DataEase H2 RCE via Zip Protocol & File Dropper Fix bypass\nCVE ID : CVE-2026-55633\n \n Published : July 7, 2026, 9:17 p.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a bypass of t...", "creation_timestamp": "2026-07-07T23:57:13.904639Z"}, {"uuid": "89124c50-b740-421c-a70c-21dd1848660f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55638", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdaa2jkj22a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55638 \u0432 9Router: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/982602FC-67DD-4D2C-8B8E-937934F1BCD9", "creation_timestamp": "2026-07-10T22:49:02.984356Z"}, {"uuid": "3d31ee28-a66b-4982-b96a-6a5cca521bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55638", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdczk2d552e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55638 \u0432 9Router: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/82E27FC8-78DB-42B2-978E-5EEC955B5162", "creation_timestamp": "2026-07-10T23:39:05.353614Z"}, {"uuid": "7d3e7e97-c268-4ee5-8237-681f7a64aa04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55638", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqfdwr7f7w2c", "content": "\ud83d\udfe0 CVE-2026-55638 - High (8.6)\n\n9Router is an AI router & token saver. Prior to 0.5.2, 9router protects /v1, /v1beta, /api/v1, an...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55638/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T19:00:45.943963Z"}, {"uuid": "b6436241-2ec0-4f1a-944e-32ed7c902a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55634", "type": "published-proof-of-concept", "source": "https://github.com/pimcore/pimcore/security/advisories/GHSA-9x44-4gxf-8c25", "content": "", "creation_timestamp": "2026-08-28T20:35:05.026029Z"}, {"uuid": "c055abbb-d2a8-4ddc-9dd3-945ba790b8d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55637", "type": "seen", "source": "https://gist.github.com/alon710/f1f1abcaa50d05cc95fe39660771a422", "content": "# CVE-2026-55637: CVE-2026-55637: Remote Administrative Command Execution in genieacs-mcp via DNS Rebinding\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55637\n\n## Summary\nCVE-2026-55637 is a high-severity DNS rebinding vulnerability affecting the genieacs-mcp Model Context Protocol server. Prior to version 0.3.2, the application's Streamable HTTP transport lacks adequate Host and Origin header validation. This omission allows external attackers to bypass the Same-Origin Policy through a victim's browser and issue unauthenticated commands to loopback listeners.\n\n## TL;DR\nUnauthenticated loopback HTTP transport in genieacs-mcp prior to 0.3.2 fails to validate Host and Origin headers, enabling remote attackers to bypass the Same-Origin Policy via DNS rebinding and compromise GenieACS administration.\n\n## Technical Details\n\n- **CWE ID**: CWE-346 (Origin Validation Error)\n- **Attack Vector**: Network / Browser-Driven DNS Rebinding\n- **CVSS v4.0 Score**: 8.8 (High)\n- **Exploit Status**: Proof of Concept\n- **CISA KEV Status**: Not Listed\n- **Remediation Status**: Patched in v0.3.2\n\n## Affected Systems\n\n- genieacs-mcp\n- **genieacs-mcp**: < 0.3.2 (Fixed in: `0.3.2`)\n\n## Mitigation\n\n- Upgrade to genieacs-mcp v0.3.2 or higher.\n- Disable the HTTP network listener by setting TRANSPORT=stdio.\n- Enforce mandatory authorization across loopback interfaces by configuring MCP_AUTH_TOKEN.\n- Define strict domain restrictions using MCP_ALLOWED_HOSTS and MCP_ALLOWED_ORIGINS environment variables.\n\n**Remediation Steps:**\n1. Access the local deployment configuration files for the genieacs-mcp application.\n2. Modify the configuration or Docker-compose environment variables to update the container version to v0.3.2.\n3. If immediate upgrade is unfeasible, add TRANSPORT=stdio to the system's environment properties.\n4. Generate and configure a robust token under MCP_AUTH_TOKEN to require authenticated interactions.\n\n## References\n\n- [CVE-2026-55637 Record](https://www.cve.org/CVERecord?id=CVE-2026-55637)\n- [Official Security Advisory GHSA-cmwv-wf9p-p8wx](https://github.com/GeiserX/genieacs-mcp/security/advisories/GHSA-cmwv-wf9p-p8wx)\n- [Pull Request Addressing DNS Rebinding](https://github.com/GeiserX/genieacs-mcp/pull/26)\n- [v0.3.2 Release Tag](https://github.com/GeiserX/genieacs-mcp/releases/tag/v0.3.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55637) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-26T12:32:44.827783Z"}, {"uuid": "14d1eb01-52bc-48ae-8e2d-2470808eebf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55638", "type": "published-proof-of-concept", "source": "https://github.com/decolua/9router/security/advisories/GHSA-8gmq-j984-vp4r", "content": "", "creation_timestamp": "2026-08-28T20:35:20.352722Z"}, {"uuid": "6bea816f-045d-4e29-be01-a81c4ab98caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55639", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mr3xy5spe72g", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-55639](https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6.1)\nxrdp is an open sou...\nhttps://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6.1 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-20T18:58:01.681328Z"}, {"uuid": "f6b0b245-cca0-4586-a12b-2d586f3e355a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55637", "type": "published-proof-of-concept", "source": "https://github.com/GeiserX/genieacs-mcp/security/advisories/GHSA-cmwv-wf9p-p8wx", "content": "", "creation_timestamp": "2026-08-25T20:35:33.034899Z"}, {"uuid": "e71f6e4e-63af-45f1-a660-14d60d5a602e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55634", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6eta3ywc2b", "content": "\ud83d\udea8 CVE-2026-55634 \u2014 CVSS 9.9 CRITICAL\n\nPimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55634\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T22:08:48.941325Z"}, {"uuid": "6f89ec16-09e8-4671-81f0-4fdef8fd3789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55634", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mu6ovaorec2h", "content": "CVE-2026-55634 - Critical Code Injection vulnerability in Pimcore import API. CVSS 9.9. Update immediately. #CVE #Pimcore #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55634/", "creation_timestamp": "2026-08-29T01:08:54.553685Z"}, {"uuid": "eb881221-681f-4d90-9b0c-87a7d1abc2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55634", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117176122354427107", "content": "CVE-2026-55634 - Critical Code Injection vulnerability in Pimcore import API. CVSS 9.9. Update immediately. #CVE #Pimcore #infosec\nhttps://www.valtersit.com/cve/CVE-2026-55634/", "creation_timestamp": "2026-08-29T01:08:56.958284Z"}, {"uuid": "a979fc0c-4686-425f-b5c4-595cebd503a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55634", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mubzpgkdkz26", "content": "\ud83d\udd34 CVE-2026-55634 - Critical (9.9)\n\nPimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55634/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T09:00:30.060446Z"}]}