Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Alibaba vulnerabilities

5 published CVEs name Alibaba among the affected products.

Newest CVEs

  • CVE-2026-9680

    MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server

    Alibaba · Alibaba Cloud RDS OpenAPI MCP Server

    Medium5.8
  • CVE-2026-16723

    Remote Code Execution in fastjson 1.2.68–1.2.83

    Alibaba · Fastjson

    Critical9.0
  • CVE-2025-70974

    Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may…

    Alibaba · Fastjson

    Critical10.0
  • CVE-2021-29441

    Authentication bypass

    alibaba · nacos

    High8.6
  • CVE-2021-29442

    Authentication bypass

    alibaba · nacos

    High8.6