punkpeye

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

punkpeye records in CISA KEV

No punkpeye vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70695 CVE-2026-108716 · GHSA-jrvg-vw6c-rp59

mcp-remote Cleartext Credential Transmission in Device-Code OAuth Flow

LOW 26

mcp-remote 0.8.0 through 0.14.3 contains a cleartext transmission vulnerability in authorizeWithDeviceCode that sends client secrets and receives tokens without enforcing HTTPS endpoints.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.002 Published 2026-10-11 No fix listed CWE-319

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0