Skip to content
OpenAdvisories

Vendor

team-telnyx

2 known vulnerabilities.

Products

telnyx-mcp 1 telnyx 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-81098

    Telnyx MCP Server through 6.83.0 Missing Authentication on Streamable HTTP Transport

    The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in …

    team-telnyx telnyx-mcp
  • Critical 9.4
    CVE-2026-33634 Exploited Public exploit EPSS 62%

    Trivy ecosystem supply chain briefly compromised

    Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in…

    BerriAI Aqua Security team-telnyx litellm Go GitHub Actions
    KEV Mar 26, 2026