Skip to content
OpenAdvisories

Vendor

mzxrai

1 known vulnerabilities.

Products

mcp-webresearch 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-65056

    mcp-webresearch Server-Side Request Forgery in visit_page Due to Missing Internal-IP Filtering

    mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to access internal network services by supplying loopback, link-local, or cloud metadata addresses to the visit_page tool, which only validates the URL protocol w…

    mzxrai mcp-webresearch