Is CVE-2026-18486 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18486?

CVE-2026-18486 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-18486

Description

IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and escalate privileges due to improper validation of jq filters.