CursorTouch
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Windows-MCP | 1 | – | Jun 17, 2026 |
Exploited and recent CVEs
- CVE-2026-48989 Windows-MCP: HTTP transports expose unauthenticated PowerShell control with wildcard CORS 0.4%
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Windows-MCP | 1 | – | Jun 17, 2026 |