haris-musa

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

haris-musa records in CISA KEV

No haris-musa vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-29316 CVE-2026-40576 · GHSA-j98m-w3xp-9f56

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in excel-mcp-server

HIGH 80

excel-mcp-server is a Model Context Protocol server for Excel file manipulation.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00465 Published 2026-04-21 Fixed in 0.1.8 CWE-22

TI-2026-58773 CVE-2026-85661 · GHSA-xv88-r947-5c3v

excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio mode

MEDIUM 49

excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allowing attackers to read and write arbitrary files.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00687 Published 2026-09-04 No fix listed CWE-22

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0