ihor-sokoliuk

Products

ProductCVEsExploitedLatest
mcp-searxng4–Sep 15, 2026

Exploited and recent CVEs

  • CVE-2026-58483 High 7.5 mcp-searxng: Unbounded Response Body Read Bypasses URL Size Limit in `web_url_read` 0.7%
  • CVE-2026-58485 High 7.1 mcp-searxng: DNS-resolved Private Hostname SSRF in `web_url_read` 0.2%
  • CVE-2026-54688 Medium 6.5 mcp-searxng: SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off) 0.5%
  • CVE-2026-54689 Medium 6.3 mcp-searxng hardened-mode SSRF bypasses permit internal URL access 0.2%