Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

maximhq vulnerabilities

3 published CVEs name maximhq among the affected products.

Newest CVEs

  • CVE-2026-90898

    Bifrost unauthenticated remote code execution via MCP stdio client registration

    maximhq · Bifrost

    Critical9.8
  • CVE-2026-86242

    Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds

    maximhq · Bifrost

    High8.1
  • CVE-2026-55245

    Bifrost: SSRF deny-list incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL

    maximhq · bifrost

    High8.7