{"data":{"id":"7c2d61ce-7f14-4549-b12c-90fe10fb7537","title":"CVE-2026-19268: A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts t","summary":"A vulnerability (CVE-2026-19268) was found in MCPGateway, a tool related to Claude usage tracking, where an attacker can inject commands by manipulating the 'since' argument in the Claude Usage Range Endpoint function. This command injection (tricking the system into running unintended commands) can be exploited remotely, and working exploit code is already publicly available.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-19268","publishedAt":"2026-08-08T08:16:51.623Z","cveId":"CVE-2026-19268","cweIds":["CWE-74","CWE-77"],"cvssScore":"6.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["MCPGateway","Anthropic Claude"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-08T08:16:51.623Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.75,"researchCategory":null,"atlasIds":null}}