CVE-2026-78573: ibm contextforge

CVSS 9.8 (critical) · published 2026-09-10

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials.

Affected products (NVD): ibm contextforge

Weakness: CWE-1392

Source: NVD CVE-2026-78573

References

• https://www.ibm.com/support/pages/node/7286834

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.