CyberSecBulletin

Ymw0407 vulnerabilities

We track 1 vulnerability in Ymw0407 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 13, 2026.

1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score

Latest Ymw0407 vulnerabilities

  • 7.4 High severity

    auth-fetch-mcp: Server-Side Request Forgery

    CVE-2026-49857Ymw0407

    auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authenticated web pages. Version 3.0.1 implements SSRF protection in `assertSafeUrl()` (`src/security.ts`) to block requests to private and loopback addresses. However, the `isPrivateV6