Dashboard / CVE-2026-16133

CVE-2026-16133

LOW
INFO Priority: 0.02 BB Relevance: 53/100
Published: 2026-07-18 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: Passive
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the function child_process.spawn of the file mcp.ts. Executing a manipulation can lead to command injection. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Weakness Classification (2)

References & Advisories (8)

Bug Bounty Relevance

53 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

1.3 / 10.0 v4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

1.23%
Raw Score 0.012250
Percentile 68.7%
Date 2026-10-29

EPSS Trend

2026-10-29
0.01225
2026-10-28
0.01225

Intelligence Sources

nvd ref →

External Links