@checkmarxzero.bsky.social on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

Checkmarx Zero

checkmarxzero.bsky.social

did:plc:g56ew7bvddbxadkg26txrolr

CVE-2026-22688: #CommandInjection in #MCP stdio configuration in #WeKnora. Authenticated users can inject commands into the MCP stdio settings, causing the server to create subprocesses and executing the injected commands. buff.ly/CyMafWP Update to v0.2.5 or higher!

2026-01-13T22:08:05.294Z