#CVE-2026-101064

Four CVEs in Obot's MCP gateway: the critical one is the Docker quickstart itself

CVE records published September 27–28, 2026 cover four flaws in Obot's MCP gateway. The critical one is a documented Docker quickstart that exposes admin access with no authentication.