Vulnerabilities in Model Context Protocol (MCP) servers — the integration layer connecting large language models to external data sources and APIs. Recurring classes include server-side request forgery (SSRF), path traversal, and injection flaws across open-source MCP projects deployed as AI infrastructure sidecars. Combined article + CVE feed for the MCP Servers beat.https://0daynews.com/en-ushttps://0daynews.com/articles/2026-08-15-mcp-memory-service-cve-2026-50027-auth-bypass/https://0daynews.com/articles/2026-08-15-mcp-memory-service-cve-2026-50027-auth-bypass/CVE-2026-50027: mcp-memory-service exposed all /api/documents/* routes without auth, letting anyone read, write, or delete AI memories. Patch to 10.67.1.Sat, 15 Aug 2026 16:00:00 GMTMCP Serversarticlehttps://0daynews.com/articles/2026-08-09-mcp-server-ssrf-path-traversal-ten-cves-one-day/https://0daynews.com/articles/2026-08-09-mcp-server-ssrf-path-traversal-ten-cves-one-day/Ten MCP server CVEs hit NVD on August 9 — all SSRF or path traversal. Same two classes, ten different projects, most maintainers silent on coordinated disclosure.Sun, 09 Aug 2026 22:15:00 GMTMCP Serversarticle