puchunjie doc-tools-mcp MCP mcp-server.ts open_document path traversal

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-7738 · Microsoft / collected KEV context

EUVD-2026-26919

GHSA-gcmm-c94j-j47x

cve-program · CVE-2026-7738

• https://vuldb.com/vuln/360913
• https://vuldb.com/vuln/360913/cti
• https://vuldb.com/submit/807642
• https://github.com/puchunjie/doc-tools-mcp/issues/4
• https://github.com/BruceJqs/public_exp/issues/38
• https://github.com/puchunjie/doc-tools-mcp/

euvd · EUVD-2026-26919

• https://vuldb.com/vuln/360913
• https://vuldb.com/vuln/360913/cti
• https://vuldb.com/submit/807642
• https://github.com/puchunjie/doc-tools-mcp/issues/4
• https://github.com/BruceJqs/public_exp/issues/38
• https://github.com/puchunjie/doc-tools-mcp/

nvd · CVE-2026-7738

• https://github.com/BruceJqs/public_exp/issues/38
• https://github.com/puchunjie/doc-tools-mcp/
• https://github.com/puchunjie/doc-tools-mcp/issues/4
• https://vuldb.com/submit/807642
• https://vuldb.com/vuln/360913
• https://vuldb.com/vuln/360913/cti

osv · GHSA-gcmm-c94j-j47x

• https://nvd.nist.gov/vuln/detail/CVE-2026-7738
• https://github.com/BruceJqs/public_exp/issues/38
• https://github.com/puchunjie/doc-tools-mcp/issues/4
• https://github.com/puchunjie/doc-tools-mcp
• https://vuldb.com/submit/807642
• https://vuldb.com/vuln/360913
• https://vuldb.com/vuln/360913/cti

No related operational record is retained in the current change model.