ExploitMatch
Back

CVE-2026-9680

Monitor on ThreatCluster

Description

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default.