{"history":[{"alert":0,"cve":"CVE-2026-104120","id":23011,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00288, \"percentile\": 0.21623}"},{"alert":0,"cve":"CVE-2026-104120","id":20634,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.00288, \"percentile\": 0.21542}"},{"alert":0,"cve":"CVE-2026-104120","id":18609,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.00288, \"percentile\": 0.21498}"},{"alert":0,"cve":"CVE-2026-104120","id":16677,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.00288, \"percentile\": 0.21488}"},{"alert":0,"cve":"CVE-2026-104120","id":14655,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.00288, \"percentile\": 0.21472}"},{"alert":0,"cve":"CVE-2026-104120","id":12437,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.00288, \"percentile\": 0.21458}"},{"alert":0,"cve":"CVE-2026-104120","id":10419,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.00288, \"percentile\": 0.21472}"},{"alert":0,"cve":"CVE-2026-104120","id":7968,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.00288, \"percentile\": 0.21484}"},{"alert":0,"cve":"CVE-2026-104120","id":5744,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.00288, \"percentile\": 0.21427}"},{"alert":0,"cve":"CVE-2026-104120","id":3385,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.00288, \"percentile\": 0.21385}"},{"alert":1,"cve":"CVE-2026-104120","id":1809,"kind":"cna","observed_at":1793665375,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-104120\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-10-06T02:27:41.354000Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-10-06T02:27:50.199Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"cpes\": [\"cpe:2.3:a:modelcontextprotocol:mcp-server-fetch:*:*:*:*:*:*:*:*\"], \"modules\": [\"Fetch Tool\"], \"product\": \"mcp-server-fetch\", \"vendor\": \"modelcontextprotocol\", \"versions\": [{\"status\": \"affected\", \"version\": \"2026.6.0\"}, {\"status\": \"affected\", \"version\": \"2026.6.1\"}, {\"status\": \"affected\", \"version\": \"2026.6.2\"}, {\"status\": \"affected\", \"version\": \"2026.6.3\"}, {\"status\": \"affected\", \"version\": \"2026.6.4\"}]}, {\"cpes\": [\"cpe:2.3:a:modelcontextprotocol:mcp-server-everything:*:*:*:*:*:*:*:*\"], \"modules\": [\"Fetch Tool\"], \"product\": \"mcp-server-everything\", \"vendor\": \"modelcontextprotocol\", \"versions\": [{\"status\": \"affected\", \"version\": \"2026.6.0\"}, {\"status\": \"affected\", \"version\": \"2026.6.1\"}, {\"status\": \"affected\", \"version\": \"2026.6.2\"}, {\"status\": \"affected\", \"version\": \"2026.6.3\"}, {\"status\": \"affected\", \"version\": \"2026.6.4\"}]}], \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"geochen (VulDB User)\"}, {\"lang\": \"en\", \"type\": \"coordinator\", \"value\": \"VulDB CNA Team\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetch_url of the file mcp_server_fetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.\"}], \"metrics\": [{\"cvssV4_0\": {\"baseScore\": 6.9, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P\", \"version\": \"4.0\"}}, {\"cvssV3_1\": {\"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C\", \"version\": \"3.1\"}}, {\"cvssV3_0\": {\"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C\", \"version\": \"3.0\"}}, {\"cvssV2_0\": {\"baseScore\": 7.5, \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C\", \"version\": \"2.0\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-918\", \"description\": \"Server-Side Request Forgery\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-10-02T02:15:18.514Z\", \"orgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"shortName\": \"VulDB\"}, \"references\": [{\"name\": \"VDB-412764 | modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery\", \"tags\": [\"vdb-entry\", \"technical-description\"], \"url\": \"https://vuldb.com/vuln/412764\"}, {\"name\": \"VDB-412764 | CTI Indicators (IOB, IOC, IOA)\", \"tags\": [\"signature\", \"permissions-required\"], \"url\": \"https://vuldb.com/vuln/412764/cti\"}, {\"name\": \"CVE-2026-104120 | CVE Analysis and Report\", \"tags\": [\"third-party-advisory\"], \"url\": \"https://vuldb.com/cve/CVE-2026-104120\"}, {\"name\": \"Submit #960099 | https://github.com/modelcontextprotocol/ servers 2026.6.4 Server-Side Request Forgery\", \"tags\": [\"third-party-advisory\"], \"url\": \"https://vuldb.com/submit/960099\"}, {\"tags\": [\"exploit\", \"issue-tracking\"], \"url\": \"https://github.com/modelcontextprotocol/servers/issues/4492\"}, {\"tags\": [\"issue-tracking\", \"patch\"], \"url\": \"https://github.com/modelcontextprotocol/servers/pull/4890\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-10-01T00:00:00.000Z\", \"value\": \"Advisory disclosed\"}, {\"lang\": \"en\", \"time\": \"2026-10-01T02:00:00.000Z\", \"value\": \"VulDB entry created\"}, {\"lang\": \"en\", \"time\": \"2026-10-01T20:20:15.000Z\", \"value\": \"VulDB entry last update\"}], \"title\": \"modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery\", \"x_generator\": [\"VulDB PVTS v202610\"]}}, \"cveMetadata\": {\"assignerOrgId\": \"1af790b2-7ee1-4545-860a-a788eba489b5\", \"assignerShortName\": \"VulDB\", \"cveId\": \"CVE-2026-104120\", \"datePublished\": \"2026-10-02T02:15:18.514Z\", \"dateReserved\": \"2026-10-01T18:15:10.419Z\", \"dateUpdated\": \"2026-10-06T02:27:50.199Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"cpes":["cpe:2.3:a:modelcontextprotocol:mcp-server-fetch:*:*:*:*:*:*:*:*"],"modules":["Fetch Tool"],"product":"mcp-server-fetch","vendor":"modelcontextprotocol","versions":[{"status":"affected","version":"2026.6.0"},{"status":"affected","version":"2026.6.1"},{"status":"affected","version":"2026.6.2"},{"status":"affected","version":"2026.6.3"},{"status":"affected","version":"2026.6.4"}]},{"cpes":["cpe:2.3:a:modelcontextprotocol:mcp-server-everything:*:*:*:*:*:*:*:*"],"modules":["Fetch Tool"],"product":"mcp-server-everything","vendor":"modelcontextprotocol","versions":[{"status":"affected","version":"2026.6.0"},{"status":"affected","version":"2026.6.1"},{"status":"affected","version":"2026.6.2"},{"status":"affected","version":"2026.6.3"},{"status":"affected","version":"2026.6.4"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-104120","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-06T02:27:41.354000Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-10-06T02:27:50.199Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"cpes":["cpe:2.3:a:modelcontextprotocol:mcp-server-fetch:*:*:*:*:*:*:*:*"],"modules":["Fetch Tool"],"product":"mcp-server-fetch","vendor":"modelcontextprotocol","versions":[{"status":"affected","version":"2026.6.0"},{"status":"affected","version":"2026.6.1"},{"status":"affected","version":"2026.6.2"},{"status":"affected","version":"2026.6.3"},{"status":"affected","version":"2026.6.4"}]},{"cpes":["cpe:2.3:a:modelcontextprotocol:mcp-server-everything:*:*:*:*:*:*:*:*"],"modules":["Fetch Tool"],"product":"mcp-server-everything","vendor":"modelcontextprotocol","versions":[{"status":"affected","version":"2026.6.0"},{"status":"affected","version":"2026.6.1"},{"status":"affected","version":"2026.6.2"},{"status":"affected","version":"2026.6.3"},{"status":"affected","version":"2026.6.4"}]}],"credits":[{"lang":"en","type":"reporter","value":"geochen (VulDB User)"},{"lang":"en","type":"coordinator","value":"VulDB CNA Team"}],"descriptions":[{"lang":"en","value":"A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetch_url of the file mcp_server_fetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance."}],"metrics":[{"cvssV4_0":{"baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","version":"4.0"}},{"cvssV3_1":{"baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C","version":"3.1"}},{"cvssV3_0":{"baseScore":7.3,"baseSeverity":"HIGH","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C","version":"3.0"}},{"cvssV2_0":{"baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C","version":"2.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-918","description":"Server-Side Request Forgery","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-02T02:15:18.514Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB"},"references":[{"name":"VDB-412764 | modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/vuln/412764"},{"name":"VDB-412764 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"],"url":"https://vuldb.com/vuln/412764/cti"},{"name":"CVE-2026-104120 | CVE Analysis and Report","tags":["third-party-advisory"],"url":"https://vuldb.com/cve/CVE-2026-104120"},{"name":"Submit #960099 | https://github.com/modelcontextprotocol/ servers 2026.6.4 Server-Side Request Forgery","tags":["third-party-advisory"],"url":"https://vuldb.com/submit/960099"},{"tags":["exploit","issue-tracking"],"url":"https://github.com/modelcontextprotocol/servers/issues/4492"},{"tags":["issue-tracking","patch"],"url":"https://github.com/modelcontextprotocol/servers/pull/4890"}],"timeline":[{"lang":"en","time":"2026-10-01T00:00:00.000Z","value":"Advisory disclosed"},{"lang":"en","time":"2026-10-01T02:00:00.000Z","value":"VulDB entry created"},{"lang":"en","time":"2026-10-01T20:20:15.000Z","value":"VulDB entry last update"}],"title":"modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery","x_generator":["VulDB PVTS v202610"]}},"cveMetadata":{"assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","assignerShortName":"VulDB","cveId":"CVE-2026-104120","datePublished":"2026-10-02T02:15:18.514Z","dateReserved":"2026-10-01T18:15:10.419Z","dateUpdated":"2026-10-06T02:27:50.199Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794522003,"cve":"CVE-2026-104120","description":"A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetch_url of the file mcp_server_fetch/server.py of the component Fetch Tool. The manipulation of the argument url/path leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.","epss":{"date":"2026-11-12","epss":0.00288,"percentile":0.21623},"epss_checked":1794522003,"first_seen":1793665374,"kev":null,"kev_checked":1794522003,"products":"modelcontextprotocol mcp-server-fetch, modelcontextprotocol mcp-server-everything","references":["https://vuldb.com/vuln/412764","https://vuldb.com/vuln/412764/cti","https://vuldb.com/cve/CVE-2026-104120","https://vuldb.com/submit/960099","https://github.com/modelcontextprotocol/servers/issues/4492","https://github.com/modelcontextprotocol/servers/pull/4890"],"score":{"baseScore":6.9,"baseSeverity":"MEDIUM","provider":"VulDB","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","version":"4.0"},"solutions":"","state":"PUBLISHED","title":"modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-v38p-wf49-hx2j","id":96,"publisher":"MCP server advisories","title":"fetch: private-address guard bypass via IDNA hostnames (check and connect resolve different names)"}]}