← Database

CVE-2026-9680

MEDIUM CVSS: 5.8 Published: 2026-07-28 Modified: 2026-07-28

Description

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.

Affected Platforms

Unknown

Weakness Type

CWE-1188

References