Topic

#cve-2026-30615

1 article exploring cve-2026-30615. Expert insights and analysis from our editorial team.

Showing 1–1 of 1 articles
Related topics:
mcp-security windsurf remote-code-execution ai-ide-security prompt-injection zero-click

Articles

Newest first
Security

Windsurf CVE-2026-30615 Is the Only Zero-Click in the April MCP RCE Wave: HTML Rewrites the Config

CISA-ADP scored CVE-2026-30615 CVSS 8.0 HIGH, making Windsurf the sole zero-click IDE in the April MCP RCE wave: attacker HTML silently rewrites mcp.json with no user.
Browse All Topics