Known Vulnerabilities for Mac-shell-mcp by Cfdude
Listed below are 10 of the newest known vulnerabilities associated with "Mac-shell-mcp" by "Cfdude".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-108953 json | mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command white... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-108759 json | mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell cod... | Not Provided | 2026-10-11 | 2026-10-11 |
| CVE-2026-108593 json | 9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endp... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-108549 json | cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-108546 json | Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attacke... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-108161 json | FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::download() that allows unauthentic... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-108159 json | AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allow... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-107814 json | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, a... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-107704 json | The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizer#identify_fo... | Not Provided | 2026-10-08 | 2026-10-09 |
| CVE-2026-107703 json | @enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to exec... | Not Provided | 2026-10-08 | 2026-10-08 |