CVE-2026-9680 — MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on…
Published: 2026-07-28 · CVSS: 5.8 · CVSS 3.1
Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7