Log in Start free

wonderwhy-er

Products

ProductCVEsExploitedLatest
DesktopCommanderMCP5–Jun 2, 2026

Exploited and recent CVEs

  • CVE-2026-10691 Medium 4.3 wonderwhy-er DesktopCommanderMCP start_search search-manager.ts redos 0.4%
  • CVE-2026-10690 Medium 6.3 wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgery 0.2%
  • CVE-2025-11491 Medium 6.3 wonderwhy-er DesktopCommanderMCP command-manager.ts CommandManager os command injection 4.3%
  • CVE-2025-11490 Medium 6.3 wonderwhy-er DesktopCommanderMCP Absolute Path command-manager.ts extractBaseCommand os command injection 3.5%
  • CVE-2025-11489 Medium 4.5 wonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink 0.3%