Known Vulnerabilities for Cloud Run MCP by Google Cloud
Listed below are 10 of the newest known vulnerabilities associated with "Cloud Run MCP" by "Google Cloud".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-116827 json | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() functi... | Not Provided | 2026-10-27 | 2026-10-26 |
| CVE-2026-116826 json | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that allows a... | Not Provided | 2026-10-27 | 2026-10-26 |
| CVE-2026-116504 json | A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of the ... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-116069 json | NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to m... | Not Provided | 2026-10-25 | 2026-10-25 |
| CVE-2026-116066 json | Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allo... | Not Provided | 2026-10-25 | 2026-10-25 |
| CVE-2026-116016 json | yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-level... | Not Provided | 2026-10-24 | 2026-10-24 |
| CVE-2026-116015 json | yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows a... | Not Provided | 2026-10-24 | 2026-10-26 |
| CVE-2026-115752 json | Signal K Server from 2.28.0-beta.2 before 2.34.0 contains a server-side request forgery vulnerability in the App Store icon f... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115729 json | @pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attackers to bypass t... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-115720 json | Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py where the assert_not_priv... | Not Provided | 2026-10-26 | 2026-10-26 |