drhelius vulnerabilities

Products

• Gearboy 1

Latest drhelius CVEs

Newest publication first

1. CVE-2026-61542 Gearboy advisory / Gearsystem body: Unauthenticated network exposure of MCP HTTP tools

   Published 2026-10-28

   High·CVSS 8.6 EPSS 0.31%

   Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP server. Gearsystem, the affected component, has an optional --mcp-http mode that accepts unauthenticated MCP requests from any reachable network peer despite localhost-only docume...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.