CVE-2026-78573

Received Received - Intake

Default Admin Credentials in IBM ContextForge MCP Gateway

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: IBM Corporation

Description

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-10

Generated

2026-09-11

AI Q&A

2026-09-11

EPSS Evaluated

N/A

NVD

CVE-2026-78573

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	contextforge_mcp_gateway	From 1.0.0 (inc) to 1.0.7 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1392	The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

Attack-Flow Graph

Executive Summary

This vulnerability involves IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.7 using default credentials, which could allow a remote attacker to gain administrative access to the system.

Detection Guidance

Check for IBM ContextForge MCP Gateway instances running with default credentials. Use network scanning tools like nmap to identify open ports and services. Search for default admin credentials in configuration files or login prompts.

Impact Analysis

An attacker exploiting this could gain full administrative control over the affected IBM ContextForge MCP Gateway, potentially leading to unauthorized access, data breaches, or system manipulation.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, which may violate compliance requirements under GDPR, HIPAA, and other regulations due to insufficient access controls and default credentials.

Mitigation Strategies

Change default credentials to strong, unique passwords. Update IBM ContextForge MCP Gateway to the latest version if available. Restrict network access to the gateway using firewalls or access controls.

Hi! I’m here to help you understand CVE-2026-78573. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70