CyberSecBulletin

Contentful vulnerabilities

We track 1 vulnerability in Contentful products across 3 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.

1vulnerabilities
0critical
1high
0exploited
7.7average CVSS score

Latest Contentful vulnerabilities

  • 7.7 High severity

    contentful-mcp-server: Server-Side Request Forgery

    CVE-2026-53957Contentful

    Contentful MCP Server is a Model Context Protocol server for the Contentful Management API. Prior to @contentful/mcp-server 1.7.19 and @contentful/mcp-tools 0.4.5, export_space and import_space in packages/mcp-tools/src/tools/jobs/space-to-space-migration/expo