Skip to content
OpenAdvisories

Vendor

Alibaba

5 known vulnerabilities.

Products

Fastjson 2 nacos 2 Alibaba Cloud RDS OpenAPI MCP Server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2026-9680

    MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server

    Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.

    Alibaba Alibaba Cloud RDS OpenAPI MCP Server