jimprosser

Products

ProductCVEsExploitedLatest
obsidian-web-mcp1–Sep 17, 2026

Exploited and recent CVEs

  • CVE-2026-54618 Critical 9.4 Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user 0.5%