CVE-2026-26118

The repository contains a security scanner for MCP servers that checks for known vulnerability classes, including CVE-2026-26118. It performs various checks such as ping handler, resource list handler, and authentication, but does not include exploit code.

This repository provides a Microsoft Sentinel lab for detecting MCP (Model Context Protocol) attack chains, including CVE-2026-26118 (SSRF token theft). It includes analytics rules, hunting queries, and a workbook for monitoring and detecting attacks.

This repository contains a security scanner for MCP (Model Context Protocol) servers, which checks for known vulnerability classes such as timing DoS, capability assumption attacks, and prompt injection. It does not exploit vulnerabilities but scans for their presence.