mcphubx records
4 published records for vendor mcphubx.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-287 Improper Authentication1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-918 Server-Side Request Forgery (SSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
22Monitor | CVE-2025-11287No exploit | samanhappy MCPHub sseService.ts handleSseConnectionfunction improper authenticationmcphubx · mcphub · CWE-287 | Medium5.5 | — | 0.5% | Oct 5, 2025 |
21Monitor | CVE-2025-13822No exploit | Authentication bypass in MCPHubmcphubx · mcphub · CWE-639 | Medium5.3 | — | 0.3% | Apr 14, 2026 |
10Monitor | CVE-2025-11285No exploit | samanhappy MCPHub serverController.ts os command injectionmcphubx · mcphub · CWE-77 | Low2.1 | — | 7.8% | Oct 5, 2025 |
8Monitor | CVE-2025-11286No exploit | samanhappy MCPHub MCPRouter Service serverController.ts server-side request forgerymcphubx · mcphub · CWE-918 | Low2.0 | — | 0.3% | Oct 5, 2025 |
- CVE-2025-1128722Monitor
samanhappy MCPHub sseService.ts handleSseConnectionfunction improper authentication
MediumCVSS 5.5No exploitEPSS 0%mcphubx · mcphubOct 5, 2025
- CVE-2025-1382221Monitor
Authentication bypass in MCPHub
MediumCVSS 5.3No exploitEPSS 0%mcphubx · mcphubApr 14, 2026
- CVE-2025-1128510Monitor
samanhappy MCPHub serverController.ts os command injection
LowCVSS 2.1No exploitEPSS 7%mcphubx · mcphubOct 5, 2025
- CVE-2025-112868Monitor
samanhappy MCPHub MCPRouter Service serverController.ts server-side request forgery
LowCVSS 2.0No exploitEPSS 0%mcphubx · mcphubOct 5, 2025