REC in MCPJam inspector due to HTTP Endpoint exposes
97Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 9.8epss 45%
de la publicación al arma4 días
Publicada en NVD16 ene
1ª PoC+4d
VulnCheck+33d
probabilidad de explotación
45%top 1% de las CVE
explotación observada
síVulnCheck
71 exploit(s) público(s)
MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
MCPJam · inspectorPoCs públicas encontradas — 71
exploitdbwww.exploit-db.com/exploits/52625no verificadogithubgithub.com/boroeurnprach/CVE-2026-23744-PoC★ 9githubgithub.com/ibreakthingsforaliving/CVE-2026-23744-PoC★ 8githubgithub.com/CerberusMrXi/CVE-2026-23744-MCPJam-Exploit★ 8githubgithub.com/thisisish/HTB-DevHub★ 4githubgithub.com/Mluex0/CVE-2026-23744-PoC★ 2githubgithub.com/SrGinebras/CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2★ 1githubgithub.com/alisster00/CVE-2026-23744-RCE★ 1githubgithub.com/afifudinmtop/MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744★ 0githubgithub.com/diamorphine666/CVE-2026-23744-exploit★ 0githubgithub.com/ozcanpng/CVE-2026-23744★ 0githubgithub.com/oryk0/CVE-2026-23744★ 0githubgithub.com/sbouabid-sec/CVE-2026-23744-POC★ 0githubgithub.com/Least-Significant-Bit/CVE-2026-23744★ 0githubgithub.com/MrR0b0t19/CVE-2026-23744-PoC★ 0githubgithub.com/jf-gondim/mcp-pwn★ 0githubgithub.com/m2sousa/CVE-2026-23744★ 0githubgithub.com/avivyap/CVE-2026-23744★ 0githubgithub.com/Dahalsamir/CVE-2026-23744-MCPJAM-RCE-exploit★ 0githubgithub.com/keeieb79/CVE-2026-23744-poc★ 0githubgithub.com/0x77FSec/CVE-2026-23744★ 0githubgithub.com/kennedy-aikohi/mcpjam-cve-2026-23744-validator★ 0githubgithub.com/rohit-sundar/cve-2026-23744★ 0githubgithub.com/daemoncibsec/mcpExec★ 0githubgithub.com/timgad794/DevHub-HTB-Walkthrough★ 0githubgithub.com/nullRoot-Red/CVE-2026-23744★ 0githubgithub.com/sonnelon/CVE-2026-23744-PoC★ 0githubgithub.com/p1ctur3p3rf3ct/CVE-2026-23744★ 0vulncheckvulncheck.com/xdb/156744a61ce5no verificadovulncheckvulncheck.com/xdb/f19a9287d9f4no verificadovulncheckvulncheck.com/xdb/22e992c6eba1no verificadovulncheckvulncheck.com/xdb/0ec514f010abno verificadovulncheckvulncheck.com/xdb/18ed655d7d3ano verificadovulncheckvulncheck.com/xdb/51473bb332acno verificadovulncheckvulncheck.com/xdb/558aeacb39afno verificadovulncheckvulncheck.com/xdb/bd0a0368bc9fno verificadovulncheckvulncheck.com/xdb/87b1467b8018no verificadovulncheckvulncheck.com/xdb/5c31e12d4578no verificadovulncheckvulncheck.com/xdb/187f9131ea4ano verificadovulncheckvulncheck.com/xdb/7df764e04e42no verificadovulncheckvulncheck.com/xdb/86e37564190ano verificadovulncheckvulncheck.com/xdb/04d2eb59baa0no verificadovulncheckvulncheck.com/xdb/e355d7728e67no verificadovulncheckvulncheck.com/xdb/754d28417536no verificadovulncheckvulncheck.com/xdb/f90556007227no verificadovulncheckvulncheck.com/xdb/14ec643809a4no verificadovulncheckvulncheck.com/xdb/4e9846e1158dno verificadovulncheckvulncheck.com/xdb/d92668d48256no verificadovulncheckvulncheck.com/xdb/bb332d214356no verificadovulncheckvulncheck.com/xdb/19bd1eda71f6no verificadovulncheckvulncheck.com/xdb/1e9f5d967258no verificadovulncheckvulncheck.com/xdb/2f8b31ea51b6no verificadovulncheckvulncheck.com/xdb/f5a69656dee5no verificadovulncheckvulncheck.com/xdb/8e55de8d7277no verificadovulncheckvulncheck.com/xdb/5dfd4e5cb15fno verificadovulncheckvulncheck.com/xdb/846d968554d1no verificadovulncheckvulncheck.com/xdb/72377de61f0cno verificadovulncheckvulncheck.com/xdb/cfc3738e7fc3no verificadovulncheckvulncheck.com/xdb/a790926d28fano verificadovulncheckvulncheck.com/xdb/cbd95f6b01c3no verificadovulncheckvulncheck.com/xdb/4f7a02d1d4cbno verificadovulncheckvulncheck.com/xdb/bc149cf30a42no verificadovulncheckvulncheck.com/xdb/310ef3751585no verificadovulncheckvulncheck.com/xdb/3b7e794b8722no verificadovulncheckvulncheck.com/xdb/6d13a01d3c1bno verificadovulncheckvulncheck.com/xdb/accf494315beno verificadovulncheckvulncheck.com/xdb/002265a51caano verificadovulncheckvulncheck.com/xdb/55939ca064efno verificadovulncheckvulncheck.com/xdb/ea79ce610d96no verificadovulncheckvulncheck.com/xdb/11a2aa8051bfno verificadovulncheckvulncheck.com/xdb/5b367c011e57no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.