Skip to content
feed: live
>_0dayNews
← All vendors
Vendor

MCP Servers

Vulnerabilities in Model Context Protocol (MCP) servers — the integration layer connecting large language models to external data sources and APIs. Recurring classes include server-side request forgery (SSRF), path traversal, and injection flaws across open-source MCP projects deployed as AI infrastructure sidecars.

0 CVEs2 articlesRSS
Articles
~/articles/2026-08-15-mcp-memory-service-cve-2026-50027-auth-bypass
Unauth Access to AI Memory: CVE-2026-50027 Patched
mcp

Unauth Access to AI Memory: CVE-2026-50027 Patched

CVE-2026-50027: mcp-memory-service exposed all /api/documents/* routes without auth, letting anyone read, write, or delete AI memories. Patch to 10.67.1.

read →
~/articles/2026-08-09-mcp-server-ssrf-path-traversal-ten-cves-one-day
Ten MCP Server CVEs Drop in a Single Day
Analysis
mcp

Ten MCP Server CVEs Drop in a Single Day

Ten MCP server CVEs hit NVD on August 9 — all SSRF or path traversal. Same two classes, ten different projects, most maintainers silent on coordinated disclosure.

read →