CVE-2026-9680 UNKNOWN

CVE-2026-9680

Published: 2026-07-28

Description

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.

AI Intelligence Brief

AI Intelligence

Analyzing vulnerability vectors…