Alibaba vulnerabilities

5 published CVEs name Alibaba among the affected products.

Critical 2High 2Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-9680
MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server
Alibaba · Alibaba Cloud RDS OpenAPI MCP Server
Medium5.8
CVE-2026-16723
Remote Code Execution in fastjson 1.2.68–1.2.83
Alibaba · Fastjson
Critical9.0
CVE-2025-70974
Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may…
Alibaba · Fastjson
Critical10.0
CVE-2021-29441
Authentication bypass
alibaba · nacos
High8.6
CVE-2021-29442
Authentication bypass
alibaba · nacos
High8.6