Cfdude

Cfdude Security Releases - October 2026

cfdude-2026-10 Oct 1, 2026 Source: Vendor

Cfdude security advisories for October 2026, compiled from CVE.org records.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.cve.org/CVERecord?id=CVE-2026-108953

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1 line

Showing 1–1 of 1 matching , clear filters

CVE-2026-108953 BR2026-0000-027025 mac-shell-mcp unclaimed

mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into execute_command arguments. A...

Credited as Bandana (HackWitHer), APIsec Research Labs