Skip to content
OpenAdvisories

Vendor

netboxlabs

1 known vulnerabilities.

Products

netbox-mcp-server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-57207

    NetBox MCP Server: HTTP transport exposes all NetBox data without authentication

    NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on the HTTP endpoint. Any client that can reach the port gets a valid MCP session …

    netboxlabs netbox-mcp-server