{"basis":"claimed","id":"CVE-2026-23744","name":"REC in MCPJam inspector due to HTTP Endpoint exposes","vendorProject":"MCPJam","product":"inspector","publishedAt":"2026-01-16","cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"exploited":null,"epss":{"score":0.67516,"percentile":0.9931,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"blocks","firstOn":"2026-04-07","daysToRule":81},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2026-07-07","daysToRule":172},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}},"title":"REC in MCPJam inspector due to HTTP Endpoint exposes","description":"MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.","cwes":["CWE-306"],"vendors":[{"vendor":"cloudflare","status":"blocks","basis":"claimed","firstOn":"2026-04-07","firstIsNew":true,"daysToRule":81,"daysAtMost":null,"freePlan":false,"claims":[{"id":"6fa7ad92cc9e1da13171b099aede84f08bafe2b876f13f9abf5e19d62a8edca5","cve_id":"CVE-2026-23744","vendor":"cloudflare","product":"Cloudflare Managed Ruleset","rule_id":"1177993d53a1467997002b44d46229eb","rule_name":"MCP Server - Remote Code Execution - CVE:CVE-2026-23744","change":"new","default_action":"Block","published_on":"2026-04-07","source_url":"https://developers.cloudflare.com/changelog/post/2026-04-07-waf-release/","source_title":"WAF Release - 2026-04-07","excerpt":"MCP Server - Remote Code Execution - CVE:CVE-2026-23744. Previous action: Log. New action: Block. This is a new detection.","first_seen_at":"2026-11-02T21:00:15.584Z"}]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"rule","basis":"claimed","firstOn":"2026-07-07","firstIsNew":true,"daysToRule":172,"daysAtMost":null,"freePlan":false,"claims":[{"id":"b2cc6dbc77348a489c65b5b6eddfc2e8acc8983e2a7deb7090896c5b08a825b8","cve_id":"CVE-2026-23744","vendor":"f5","product":"Attack signatures","rule_id":"200103681","rule_name":"MCPJam Inspector Remote Code Execution","change":"new","default_action":null,"published_on":"2026-07-07","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200103681 \"MCPJam Inspector Remote Code Execution\" (Command Execution, risk High), systems: Other Web Server. References: CVE-2026-23744.","first_seen_at":"2026-11-02T21:00:24.693Z"}]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-02T21:16:35.125Z","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total"},"measured":[{"engineId":"owasp-crs","engineName":"OWASP Core Rule Set","engineVersion":"4.25.0","runtime":"Coraza v3.8.1","config":"paranoia level 1, anomaly threshold 5, default CRS settings","ranAt":"2026-11-02T13:02:57.000Z","verdict":"passed","templateId":"CVE-2026-23744","templatePath":"http/cves/2026/CVE-2026-23744.yaml","requests":1,"blockedRequests":0,"rules":[],"note":"","requestDetail":[{"method":"POST","path":"/api/mcp/connect","status":200,"blocked":false,"rules":[]}]},{"engineId":"owasp-crs","engineName":"OWASP Core Rule Set","engineVersion":"4.25.0","runtime":"Coraza v3.8.1","config":"paranoia level 2, anomaly threshold 5, default CRS settings","ranAt":"2026-11-02T13:03:28.000Z","verdict":"passed","templateId":"CVE-2026-23744","templatePath":"http/cves/2026/CVE-2026-23744.yaml","requests":1,"blockedRequests":0,"rules":[],"note":"","requestDetail":[{"method":"POST","path":"/api/mcp/connect","status":200,"blocked":false,"rules":[]}]}],"social":{"total":0,"first_seen":null,"daily":[{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":0},{"day":"2026-11-03","posts":0}],"top_posts":[],"exploit_repositories":[]}}