Skip to content
OpenAdvisories

Vendor

drhelius

1 known vulnerabilities.

Products

Gearboy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-61542

    Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools

    Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem, the affected component, has an optional `--mcp-http` mode that accepts unauthenticated MCP requests from any reachable network peer despit…

    drhelius Gearboy