cisa cybersecurity mcp server MCP Resources
cisa cybersecurity mcp server offers 61 resources. A resource is data the server exposes for a client to attach as context — a file, a page, an API response — rather than an action. Each has its own page, per client.
-
CVE-2026-123039 — Check Point Multiple Products Incorrect Permission As… -
CVE-2026-114713 — UnrealIRCd Improper Neutralization of Delimiters Vuln… -
CVE-2026-20320 — Cisco BroadWorks Improper Restriction of XML External … -
CVE-2026-125350 — Google Chromium Use-After-Free Vulnerability -
CVE-2026-124194 — Microsoft Office Outlook Missing User Interaction for… -
CVE-2026-116606 — Barracuda Networks Email Security Gateway (ESG) Authe… -
CVE-2026-111793 — Openwave Messaging Limited Webtop Media Transcoder In… -
CVE-2026-111560 — Barracuda Networks Multiple Products OS Command Injec… -
CVE-2026-123218 — IBM Aspera Faspex Incorrect Authorization Vulnerabili… -
CVE-2026-123158 — OpenBSD OpenSSH Unexpected Status Code or Return Valu… -
CVE-2026-116779 — SignalWire FreeSwitch Code Injection Vulnerability -
CVE-2026-102895 — GPUStack Improper Authentication Vulnerability -
CVE-2026-19868 — SonicWall SonicOS SSLVPN Use of Single-factor Authenti… -
CVE-2024-27834 — Apple Multiple Products Improper Authentication Vulner… -
CVE-2026-119977 — WordPress WordPress Core Time-of-check Time-of-use (T… -
CVE-2026-118527 — Ivanti Connect Secure Generation of Predictable Numbe… -
CVE-2026-111357 — Ivanti Connect Secure Missing Authentication for Crit… -
CVE-2026-97229 — GitLab Community Edition and Enterprise Edition Intege… -
CVE-2026-76418 — Cisco Secure Firewall ASA Software and Cisco Secure FT… -
CVE-2026-46300 — Linux Kernel Missing Initialization of a Variable Vuln… -
CVE-2026-41709 — Broadcom VMWare ESX Insufficient Logging Vulnerability -
CVE-2026-48356 — Adobe Commerce and Magento Unrestricted Upload of File… -
CVE-2026-111497 — Google Brotli Unchecked Return Value Vulnerability -
CVE-2026-109619 — PHP Stale Internal Request-State Vulnerability -
CVE-2026-109618 — PHP Memory Corruption Vulnerability -
CVE-2026-114625 — Arista VeloCloud Orchestrator SQL Injection Vulnerabi… -
CVE-2026-110447 — Collabora Online – Built-in CODE Server OS Command In… -
CVE-2026-96656 — Plex Media Server External Control of File Name or Pat… -
CVE-2026-96655 — Plex Media Server Server-Side Request Forgery (SSRF) V… -
CVE-2026-96654 — Plex Media Server Improper Neutralization of Encoded U… -
ICSA-26-316-01 — Siemens Building Automation and Energy Products -
ICSA-26-316-02 — Siemens Desigo, Gridscale -
ICSA-26-316-03 — Siemens Industrial Edge Management -
ICSA-26-316-04 — Siemens RUGGEDCOM APE1808 -
ICSA-26-316-05 — Siemens RUGGEDCOM APE1808 -
ICSA-26-237-03 — Siemens SIMATIC IoT2050 Advanced -
ICSA-26-155-04 — Hitachi Energy RTU500 (Update A) -
ICSA-26-211-07 — Mitsubishi Electric CC-Link IE TSN Communication Proto… -
ICSA-26-307-01 — Subnet Solutions PowerSYSTEM Center -
ICSA-26-302-01 — Siemens Mendix SAML Module -
ICSA-26-302-02 — Hitachi Energy TRO600 series products -
ICSA-26-302-03 — Hitachi Energy CoreTec Product -
ICSA-26-258-06 — Siemens Mendix SAML -
ICSA-26-125-01 — Hitachi Energy PCM600 (Update A) -
ICSA-25-275-02 — Hitachi Energy MSM Product (Update A) -
ICSA-26-300-01 — EPICS Base -
ICSA-26-300-02 — Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite,… -
ICSA-26-267-02 — Eufy Omni C20, Omni X10 Pro (Update A) -
ICSA-26-295-01 — Kiloview E3 NDI Encoder -
ICSA-26-295-02 — Siemens Industrial Edge App Publisher -
ICSA-26-295-03 — Siemens Software Center -
ICSA-26-295-04 — Siemens Capital Embedded AR Classic -
ICSA-26-295-05 — Siemens SENTRON 3NA COM Fuse -
ICSA-26-295-06 — Siemens PSS(R)SINCAL -
ICSA-26-295-07 — Siemens SIMATIC IPCs -
ICSA-26-295-08 — Siemens APOGEE, TALON and Desigo PXC/PXM Products -
ICSA-26-295-09 — Siemens Industrial Edge Device Kit -
ICSA-26-295-10 — Siemens SIMATIC S7 Webserver API -
ICSA-26-295-11 — Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP -
ICSA-26-295-12 — Siemens RUGGEDCOM CROSSBOW -
cisa-cybersecurity-guide
Read from the server itself, by connecting to it and calling resources/list on 14 November 2026.
A listing does not declare its resources, so asking is the only way to know them, and this
is what the server actually offers rather than what its listing claims. Names only are
stored; connect the server for each resource's type and contents.