Topic
2 articles
CyberSecureToday covers IDOR across 2 articles published between 2 Oct 2026 and 4 Oct 2026.
The coverage includes 2 vulnerability advisories. 2 advisories are rated critical or high severity.
Stories on IDOR most often intersect with MetaMCP, metatool-ai and Model Context Protocol, with Technology, Cloud & SaaS the most affected sector. The most recent story, “MetaMCP Flaws, Still Unpatched, Allow Command Execution and Cross-Tenant Session Hijacking”, was published 4 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelMetaMCP CVE-2026-79538 (9.8) and CVE-2026-79537 (9.1) enable container code execution and cross-tenant MCP tool hijacking. No patch exists; mitigations inside.
Threat IntelCISA advisory ICSA-26-274-06 details critical Broken Object Level Authorization in Meari IoT Cloud OpenAPI, exposing millions of surveillance devices worldwide.