PT-2026-68494 · Missionsquad · Mcp-Api

·

CVE-2026-19040

·

Published

2026-08-06

·

Updated

2026-08-06

CVSS v2.0

6.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions MissionSquad mcp-api versions prior to 1.11.10
Description A remote flaw exists in a function within the src/services/dcrClients.ts file. This issue allows for server-side request forgery, a technique where an attacker induces the server to make requests to an unintended location.
Recommendations Upgrade to version 1.11.10.

Exploit

Fix

SSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-19040

Affected Products

Mcp-Api