Oraios AI

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Oraios AI records in CISA KEV

No Oraios AI vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2026-36626 CVE-2026-49471 · GHSA-37h2-6p4f-mp3q

HIGH 71

Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00373 Published 2026-07-07 Fixed in 1.5.2 CWE-306

TI-2026-28220 CVE-2026-38924 · GHSA-gx4x-gc82-v87q

MEDIUM 48

In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0.

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00157 Published 2026-09-14 Fixed in 1.0.0 CWE-669