CVE-2026-19956
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A vulnerability was found in gomarble-ai facebook-ads-mcp-server 0.1.0. It affects the fetch_pagination_url function in server.py. The manipulation leads to server-side request forgery. The attack can be launched remotely. A patch is available with ID 4e53875aa22e8991c2fa4a7660d86e1caba66659.
Risk Assessment
Ability to send requests to internal resources, potentially leading to data exposure or attacks on other systems. Applying the patch is recommended.
Recommendation
Apply the available patch (commit 4e53875aa22e8991c2fa4a7660d86e1caba66659) or update to a newer version.
Original NVD description (English source)
A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element is the function fetch_pagination_url of the file server.py. Such manipulation leads to server-side request forgery. The attack can be launched remotely. The name of the patch is 4e53875aa22e8991c2fa4a7660d86e1caba66659. Applying a patch is advised to resolve this issue.