Daily digest · Sep 24, 2026

VulnWatch Daily: Critical Prompt Injection in Decepticon & MCP Server Flaws

Today's digest highlights a CVSS 10.0 prompt injection in Decepticon allowing role-boundary forgery, alongside critical DNS rebinding and auth-bypass flaws in DBHub and Cline MCP servers.

Prompt Injection Supply Chain Remote Code Execution Auth Bypass SSRF Agentic / MCP

Subscribers only

The full Daily Briefing is available to VulnWatch subscribers. Subscribe to read this digest and get tomorrow's delivered to your inbox.

See pricing