Home › CVE Intelligence › CVE-2026-57860
CVSS 9.8 CRITICAL Vulnerability

CVE-2026-57860: CVE-2026-57860 - ForgeCode Arbitrary Code Execution via Unvetted .mcp.json in Untrusted R…

CVE-2026-57860 ForgeCode Arbitrary Code Execution via Unvetted .mcp.json in Untrusted Repository

9.8CVSS Score
CRITICALSeverity
NOCISA KEV
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-57860
VendorUnknown Vendor
Affected ProductUnknown Product
Vulnerability TypeVulnerability
CVSS Score9.8 (CRITICAL)
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

CVE-2026-57860 - ForgeCode Arbitrary Code Execution via Unvetted .mcp.json in Untrusted Repository

🎯 Known Indicators of Compromise

{"type":"url","value":"https://cvefeed.io/vuln/detail/CVE-2026-57860","confidence_score":31,"first_seen":"2026-07-17","source_count":1} {"type":"domain","value":"files.lines","confidence_score":32.5,"first_seen":"2026-07-17","source_count":1} {"type":"indicator","value":"CVE-2026-57860","confidence_score":23.5,"first_seen":"2026-07-17","source_count":1} {"type":"indicator","value":"CVE-2026-63101","confidence_score":23.5,"first_seen":"2026-07-17","source_count":1} {"type":"indicator","value":"CVE-2026-63307","confidence_score":23.5,"first_seen":"2026-07-17","source_count":1} {"type":"indicator","value":"CVE-2026-63308","confidence_score":23.5,"first_seen":"2026-07-17","source_count":1} {"type":"indicator","value":"CVE-2026-63309","confidence_score":23.5,"first_seen":"2026-07-17","source_count":1} {"type":"indicator","value":"CVE-2026-8297","confidence_score":23.5,"first_seen":"2026-07-17","source_count":1} {"type":"indicator","value":"CVE-2026-9585","confidence_score":23.5,"first_seen":"2026-07-17","source_count":1} {"type":"indicator","value":"CVE-2026-9586","confidence_score":23.5,"first_seen":"2026-07-17","source_count":1} {"type":"indicator","value":"CVE-2026-9587","confidence_score":23.5,"first_seen":"2026-07-17","source_count":1} {"type":"indicator","value":"CVE-2026-9588","confidence_score":23.5,"first_seen":"2026-07-17","source_count":1} {"type":"domain","value":"mcp.js","confidence_score":32.5,"first_seen":"2026-07-17","source_count":1}
⚡ DETECTION RULES AVAILABLE

Get CVE-2026-57860 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence