Vorota-ai

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Vorota-ai records in CISA KEV

No Vorota-ai vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-81174 CVE-2026-117570 · GHSA-65g8-vjqh-r7qc

nmap-mcp allowlist lets callers run blocked NSE script categories

LOW 28

Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabilities tool that lets callers run blocked NSE script categories.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00243 Published 2026-10-27 No fix listed CWE-183

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0