VULNRABLE / Vulnerability / CVE-2026-59971
CVE-2026-59971
CRITICAL WATCH mysql-mcp-server GHSA
Exploit verdict: CVSS 9.5 · no EPSS data
CVSS Score
9.5
Severity
CRITICAL
EPSS
—
Source
GHSA
Summary
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
What this means
CVE-2026-59971 is a critical-severity vulnerability affecting mysql-mcp-server, rated CVSS 9.5. Published September 12, 2026.
View full advisory at GHSA →