Every CVE whose affected-product data names Ibm Contextforge, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (5)
CVE-2026-78573 — CVSS 9.8 (critical): IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default…
CVE-2026-18486 — CVSS 8.8 (high): IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and…
CVE-2026-77822 — CVSS 8.2 (high): IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery…
CVE-2026-18905 — CVSS 7.7 (high): IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authenticated attacker to obtain…
CVE-2026-18489 — CVSS 7.4 (high): IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information…