Dynatrace-Oss

4 CVEs in 1 Dynatrace-Oss product, including Dynatrace-Mcp. Newest: CVE-2026-123812 (2026-11-09). Severity, EPSS and public exploits for each.

Dynatrace-Oss products with known CVEs

ProductCVEs
Dynatrace-Mcp4
Dynatrace-Oss CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-123812Low3.72026-11-09Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 1.8.7, the create_dynatrace_notebook registration in src/index.ts performs a persis…
CVE-2026-123811High7.52026-11-09Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, a server started with the --http option accepts JSON-RPC tools/call requests…
CVE-2026-123810Medium4.32026-11-09Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.1.1, several read capabilities interpolate caller-controlled values into DQL with…
CVE-2026-123809Medium4.22026-11-09Dynatrace MCP Server is an MCP server for Dynatrace Observability. Prior to 2.0.0, the create_workflow_for_notification tool inserts the caller-controlled team…