CVE-2026-38924
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was
CVSS
2.9
Bajo
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 14 sept 2026 · Última mod.: 14 sept 2026 · CWE-669
Sin historial EPSS suficiente todavía.
In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a sandboxed environment for running Serena."
- dash.securityhttps://dash.security/blog/cve-2026-38924-unauthenticated-rce-in-the-serena-mcp-server
- github.comhttps://github.com/oraios/serena/commit/a7af5c1f8a9ea27102eac9e72f64dd97dbfefff3
- github.comhttps://github.com/oraios/serena/commit/b00ae292ac2d49947506886f44eb1cad7b7d7cd1
- github.comhttps://github.com/oraios/serena/compare/v0.1.4...v1.0.0
- github.comhttps://github.com/oraios/serena/security/advisories/GHSA-m922-r24v-6wff
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-372533.1 BAJ—
———An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config variables.2hCVE-2023-372523.1 BAJ—
———An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden.2hCVE-2023-328037.5 ALT—
———The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491.3hCVE-2025-454803.0 BAJ—
———Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary.13hCVE-2026-891622.9 BAJ1.2%
——0In PCRE2 before 10.48, pcre2_serialize_encode might disclose two bytes to an adversary, typically in a situation where the access available to the adversary is already unsafe.3dCVE-2026-877246.5 MED17.8%
——5Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attackers to cause a denial of service (crash) because of corrupted congestion-control state. This is TROVE-2026-032.5d