CVE-2026-78573: IBM Contextforge

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials.

Affected products

• IBM Contextforge: from 1.0.0, up to and including 1.0.7

Published 2026-09-10. Last modified 2026-09-16.