Medium severity6.3NVD Advisory· Published Aug 9, 2026

CVE-2026-19340

Description

A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file backend-fix/complete_backend.js of the component Webhooks API. This manipulation of the argument url causes server-side request forgery. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Anubissbe/ProjectHub-Mcpllm-create
Range: <=5.0.0

Patches

Vulnerability mechanics

References

github.com/anubissbe/ProjectHub-Mcp/issues/176nvd
vuldb.com/cve/CVE-2026-19340nvd
vuldb.com/submit/865264nvd
vuldb.com/vuln/387176nvd
vuldb.com/vuln/387176/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000