Skip to content
iPatch
Search CVEs, vendors, products
/
Log in
Start free
Today
Exploited tracker
Weekly brief
Vendors
How it works
Trust
Pricing
Vendors
/
Oraios AI
/
Serena
Oraios AI Serena
CVE-2026-38924
Low
2.9
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation,
0.2%