doobidoo

Products

ProductCVEsExploitedLatest
mcp-memory-service4–Aug 14, 2026

Exploited and recent CVEs

  • CVE-2026-50027 Critical 9.8 mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete 1.0%
  • CVE-2026-49291 High 8.1 mcp-memory-service: OAuth read-only clients can write and delete memories through MCP tools/call 0.5%
  • CVE-2026-33010 High 8.1 mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft 0.4%
  • CVE-2026-29787 Medium 5.3 mcp-memory-service: System Information Disclosure via Health Endpoint 0.4%