CVE-2026-19040 | MissionSquad mcp-api up to 1.11.9 dcrClients.ts server-side request forgery (Issue 42)

August 6, 2026 Yanac

A vulnerability, which was classified as critical, was found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery.

This vulnerability appears as CVE-2026-19040. The attack may be performed from remote. In addition, an exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More