CyberSecBulletin

Merill vulnerabilities

We track 1 vulnerability in Merill products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.

1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score

Latest Merill vulnerabilities

  • 8.7 High severity

    lokka: Server-Side Request Forgery

    CVE-2026-58201Merill

    Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the manag