CVE-2026-18484

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18484", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-07-31T13:22:47.530Z", "datePublished": "2026-11-08T17:54:59.348Z", "dateUpdated": "2026-11-09T20:27:34.461Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-11-08T17:54:59.348Z"}, "title": "IBM ContextForge MCP Gateway is affected by a denial-of-service via tool name collision through slug normalization", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-706", "description": "CWE-706 Use of Incorrectly-Resolved Name or Reference", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "ContextForge MCP Gateway", "versions": [{"status": "affected", "version": "1.0.0", "lessThanOrEqual": "1.0.11", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:contextforge_mcp_gateway:1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:contextforge_mcp_gateway:1.0.11:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper slug normalization causing tool name collisions.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper slug normalization causing tool name collisions.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7294233", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}}], "workarounds": [{"lang": "en", "value": "If an immediate upgrade is not possible, an administrator can mitigate an active collision by renaming or removing one of the two conflicting gateway registrations, which restores invocability of the affected tool. There is no configuration setting that prevents the collision from being created prior to the v1.1.0 fix.\n\n\nIBM strongly recommends upgrading to v1.1.0.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><div>If an immediate upgrade is not possible, an administrator can mitigate an active collision by renaming or removing one of the two conflicting gateway registrations, which restores invocability of the affected tool. There is no configuration setting that prevents the collision from being created prior to the v1.1.0 fix.</div><br/><div>IBM strongly recommends upgrading to v1.1.0.</div></div>"}]}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\nProduct(s)Version(s) number and/or range\u00a0Remediation/Fix/InstructionsIBM ContextForge MCP Gateway\n\n\n\n1.0.0 - v1.0.11Upgrade to v1.1.0. See [ v1.1.0 release notes https://github.com/IBM/mcp-context-forge/releases/tag/v1.1.0 ]", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><strong>IBM strongly recommends addressing the vulnerability now.</strong></p><div><table><tbody><tr><td><strong>Product(s)</strong></td><td><strong>Version(s) number and/or range\u00a0</strong></td><td><strong>Remediation/Fix/Instructions</strong></td></tr><tr><td><div><div>IBM ContextForge MCP Gateway</div></div></td><td>1.0.0 - v1.0.11</td><td><div><div>Upgrade to v1.1.0. See [<a href=\"https://github.com/IBM/mcp-context-forge/releases/tag/v1.1.0\" rel=\"nofollow\">v1.1.0 release notes</a>]</div></div></td></tr></tbody></table></div><p></p><p></p>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T20:27:27.438784Z", "id": "CVE-2026-18484", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T20:27:34.461Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-18484", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-09T20:27:27.438784Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T20:27:31.410Z"}}], "cna": {"title": "IBM ContextForge MCP Gateway is affected by a denial-of-service via tool name collision through slug normalization", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:contextforge_mcp_gateway:1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:contextforge_mcp_gateway:1.0.11:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "ContextForge MCP Gateway", "versions": [{"status": "affected", "version": "1.0.0", "versionType": "semver", "lessThanOrEqual": "1.0.11"}]}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\nProduct(s)Version(s) number and/or range\u00a0Remediation/Fix/InstructionsIBM ContextForge MCP Gateway\n\n\n\n1.0.0 - v1.0.11Upgrade to v1.1.0. See [ v1.1.0 release notes https://github.com/IBM/mcp-context-forge/releases/tag/v1.1.0 ]", "supportingMedia": [{"type": "text/html", "value": "<p><strong>IBM strongly recommends addressing the vulnerability now.</strong></p><div><table><tbody><tr><td><strong>Product(s)</strong></td><td><strong>Version(s) number and/or range\u00a0</strong></td><td><strong>Remediation/Fix/Instructions</strong></td></tr><tr><td><div><div>IBM ContextForge MCP Gateway</div></div></td><td>1.0.0 - v1.0.11</td><td><div><div>Upgrade to v1.1.0. See [<a href=\"https://github.com/IBM/mcp-context-forge/releases/tag/v1.1.0\" rel=\"nofollow\">v1.1.0 release notes</a>]</div></div></td></tr></tbody></table></div><p></p><p></p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7294233", "tags": ["vendor-advisory", "patch"]}], "workarounds": [{"lang": "en", "value": "If an immediate upgrade is not possible, an administrator can mitigate an active collision by renaming or removing one of the two conflicting gateway registrations, which restores invocability of the affected tool. There is no configuration setting that prevents the collision from being created prior to the v1.1.0 fix.\n\n\nIBM strongly recommends upgrading to v1.1.0.", "supportingMedia": [{"type": "text/html", "value": "<div><div>If an immediate upgrade is not possible, an administrator can mitigate an active collision by renaming or removing one of the two conflicting gateway registrations, which restores invocability of the affected tool. There is no configuration setting that prevents the collision from being created prior to the v1.1.0 fix.</div><br/><div>IBM strongly recommends upgrading to v1.1.0.</div></div>", "base64": false}]}], "descriptions": [{"lang": "en", "value": "IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper slug normalization causing tool name collisions.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper slug normalization causing tool name collisions.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-706", "description": "CWE-706 Use of Incorrectly-Resolved Name or Reference"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-11-08T17:54:59.348Z"}}}, "cveMetadata": {"cveId": "CVE-2026-18484", "state": "PUBLISHED", "dateUpdated": "2026-11-09T20:27:34.461Z", "dateReserved": "2026-07-31T13:22:47.530Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-11-08T17:54:59.348Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:contextforge_mcp_gateway:1.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:contextforge_mcp_gateway:1.0.11:*:*:*:*:*:*:*"], "product": "ContextForge MCP Gateway", "vendor": "IBM", "versions": [{"lessThanOrEqual": "1.0.11", "status": "affected", "version": "1.0.0", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:contextforge:*:*:*:*:*:python:*:*", "matchCriteriaId": "5A4033D5-7CAC-4457-80E7-470201B0FE2A", "versionEndExcluding": "1.1.0", "versionStartIncluding": "1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper slug normalization causing tool name collisions."}], "id": "CVE-2026-18484", "lastModified": "2026-11-10T15:53:56.967", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-18484", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T20:27:27.438784Z", "version": "2.0.3"}}]}, "published": "2026-11-08T18:17:04.010", "references": [{"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7294233"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-706"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.0.0,1.0.11]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "ContextForge MCP Gateway", "source": "cna", "vendor": "IBM"}, "product": "contextforge_mcp_gateway", "vendor": "ibm"}], "created": "2026-11-08T20:00:14.418122+00:00", "updated": "2026-11-08T20:00:15.977103+00:00", "vendors": ["ibm", "ibm$PRODUCT$contextforge_mcp_gateway"]}