REC in MCPJam inspector due to HTTP Endpoint exposes
97Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 9.8epss 45%
da publicação à arma4 dias
Publicada no NVD16 de jan.
1ª PoC+4d
VulnCheck+33d
probabilidade de exploração
45%top 1% das CVEs
exploração observada
simVulnCheck
71 exploit(s) público(s)
MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
MCPJam · inspectorPoCs públicas encontradas — 71
exploitdbwww.exploit-db.com/exploits/52625não verificadogithubgithub.com/boroeurnprach/CVE-2026-23744-PoC★ 9githubgithub.com/ibreakthingsforaliving/CVE-2026-23744-PoC★ 8githubgithub.com/CerberusMrXi/CVE-2026-23744-MCPJam-Exploit★ 8githubgithub.com/thisisish/HTB-DevHub★ 4githubgithub.com/Mluex0/CVE-2026-23744-PoC★ 2githubgithub.com/SrGinebras/CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2★ 1githubgithub.com/alisster00/CVE-2026-23744-RCE★ 1githubgithub.com/afifudinmtop/MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744★ 0githubgithub.com/diamorphine666/CVE-2026-23744-exploit★ 0githubgithub.com/ozcanpng/CVE-2026-23744★ 0githubgithub.com/oryk0/CVE-2026-23744★ 0githubgithub.com/sbouabid-sec/CVE-2026-23744-POC★ 0githubgithub.com/Least-Significant-Bit/CVE-2026-23744★ 0githubgithub.com/MrR0b0t19/CVE-2026-23744-PoC★ 0githubgithub.com/jf-gondim/mcp-pwn★ 0githubgithub.com/m2sousa/CVE-2026-23744★ 0githubgithub.com/avivyap/CVE-2026-23744★ 0githubgithub.com/Dahalsamir/CVE-2026-23744-MCPJAM-RCE-exploit★ 0githubgithub.com/keeieb79/CVE-2026-23744-poc★ 0githubgithub.com/0x77FSec/CVE-2026-23744★ 0githubgithub.com/kennedy-aikohi/mcpjam-cve-2026-23744-validator★ 0githubgithub.com/rohit-sundar/cve-2026-23744★ 0githubgithub.com/daemoncibsec/mcpExec★ 0githubgithub.com/timgad794/DevHub-HTB-Walkthrough★ 0githubgithub.com/nullRoot-Red/CVE-2026-23744★ 0githubgithub.com/sonnelon/CVE-2026-23744-PoC★ 0githubgithub.com/p1ctur3p3rf3ct/CVE-2026-23744★ 0vulncheckvulncheck.com/xdb/156744a61ce5não verificadovulncheckvulncheck.com/xdb/f19a9287d9f4não verificadovulncheckvulncheck.com/xdb/22e992c6eba1não verificadovulncheckvulncheck.com/xdb/0ec514f010abnão verificadovulncheckvulncheck.com/xdb/18ed655d7d3anão verificadovulncheckvulncheck.com/xdb/51473bb332acnão verificadovulncheckvulncheck.com/xdb/558aeacb39afnão verificadovulncheckvulncheck.com/xdb/bd0a0368bc9fnão verificadovulncheckvulncheck.com/xdb/87b1467b8018não verificadovulncheckvulncheck.com/xdb/5c31e12d4578não verificadovulncheckvulncheck.com/xdb/187f9131ea4anão verificadovulncheckvulncheck.com/xdb/7df764e04e42não verificadovulncheckvulncheck.com/xdb/86e37564190anão verificadovulncheckvulncheck.com/xdb/04d2eb59baa0não verificadovulncheckvulncheck.com/xdb/e355d7728e67não verificadovulncheckvulncheck.com/xdb/754d28417536não verificadovulncheckvulncheck.com/xdb/f90556007227não verificadovulncheckvulncheck.com/xdb/14ec643809a4não verificadovulncheckvulncheck.com/xdb/4e9846e1158dnão verificadovulncheckvulncheck.com/xdb/d92668d48256não verificadovulncheckvulncheck.com/xdb/bb332d214356não verificadovulncheckvulncheck.com/xdb/19bd1eda71f6não verificadovulncheckvulncheck.com/xdb/1e9f5d967258não verificadovulncheckvulncheck.com/xdb/2f8b31ea51b6não verificadovulncheckvulncheck.com/xdb/f5a69656dee5não verificadovulncheckvulncheck.com/xdb/8e55de8d7277não verificadovulncheckvulncheck.com/xdb/5dfd4e5cb15fnão verificadovulncheckvulncheck.com/xdb/846d968554d1não verificadovulncheckvulncheck.com/xdb/72377de61f0cnão verificadovulncheckvulncheck.com/xdb/cfc3738e7fc3não verificadovulncheckvulncheck.com/xdb/a790926d28fanão verificadovulncheckvulncheck.com/xdb/cbd95f6b01c3não verificadovulncheckvulncheck.com/xdb/4f7a02d1d4cbnão verificadovulncheckvulncheck.com/xdb/bc149cf30a42não verificadovulncheckvulncheck.com/xdb/310ef3751585não verificadovulncheckvulncheck.com/xdb/3b7e794b8722não verificadovulncheckvulncheck.com/xdb/6d13a01d3c1bnão verificadovulncheckvulncheck.com/xdb/accf494315benão verificadovulncheckvulncheck.com/xdb/002265a51caanão verificadovulncheckvulncheck.com/xdb/55939ca064efnão verificadovulncheckvulncheck.com/xdb/ea79ce610d96não verificadovulncheckvulncheck.com/xdb/11a2aa8051bfnão verificadovulncheckvulncheck.com/xdb/5b367c011e57não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.