{"action":"Upgrade github.com/geiserx/genieacs-mcp to 0.3.2 or later.","affected":[{"fixed":"0.3.2","introduced":"0"}],"component":"github.com/geiserx/genieacs-mcp","cve_ids":["CVE-2026-55637"],"ecosystem":"Go","epss":0.00264,"exploited":false,"fixed_versions":["0.3.2"],"ghsa_id":"GHSA-cmwv-wf9p-p8wx","id":"tcs_01M5KGT29HY0A4KGCGBZJW5D2V","modified_at":"2026-08-26T15:15:13.378236720Z","published_at":"2026-08-26T14:57:42Z","references":["https://osv.dev/vulnerability/GO-2026-6295","https://github.com/GeiserX/genieacs-mcp/security/advisories/GHSA-cmwv-wf9p-p8wx","https://github.com/GeiserX/genieacs-mcp/commit/577306d78190622eee97e362b042a69499ef373f","https://github.com/GeiserX/genieacs-mcp/pull/26","https://github.com/GeiserX/genieacs-mcp/releases/tag/v0.3.2"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GO-2026-6295","url":"https://osv.dev/vulnerability/GO-2026-6295"},{"source":"nvd","source_id":"CVE-2026-55637","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55637"}],"summary":"genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport in github.com/geiserx/genieacs-mcp"}