CVE-2026-11918

IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content.

  • Published Sep 15, 2026
  • CVSS 5.4 medium
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-11918 at the National Vulnerability Database