01 Record

CVE-2026-75796

AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools

HighPUBLISHEDCNA: WPScan

Base score7.2 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

02 Description

AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools

Published

2026-08-21 06:00Z19 HR AGO

Last updated

2026-08-21 12:52Z12 HR AGO

Reserved

2026-08-18

Assigning CNA

WPScan

Record state

PUBLISHED

Severity

High (CVSS 7.2)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

SSVC decision

ExploitationnoneAutomatablenoTechnical Impacttotal

Data version

5.2

Document digest

457d36b764e2decd73a051f148631142baeb7cb46940e3e8351e625673ad8566

VendorProductVersionsPlatforms

UnknownAI Engine2.8.0 to < 3.6.1—