Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-78573 EUVD-2026-75798GHSA-87q9-x2gp-qchr

IBM ContextForge MCP Gateway is affected by use of default credentials

Published Sep 10, 2026 · Updated Sep 11, 2026 · Assigned by ibm

Vendor: IBM Product: ContextForge MCP Gateway

Description

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials.

Affected products

VendorProductAffectedFixed
IBM ContextForge MCP Gateway 1.0.0 – ≤ 1.0.7 —

References