Alibaba Sentinel - Server-side request forgery (SSRF)

There is a Pre-Auth SSRF vulnerability in Alibaba Sentinel version 1.8.2, which allows remote unauthenticated attackers to perform SSRF attacks via the /registry/machine endpoint through the ip parameter. id: CVE-2021-44139 info: name: Alibaba Sentinel - Server-side request forgery SSRF author:...

Nacos <1.4.1 - Authentication Bypass

This template only works on Nuclei engine prior to version 2.3.3 and version = 2.3.5. In Nacos before version 1.4.1, when configured to use authentication -Dnacos.core.auth.enabled=true Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nac...

CVE-2026-9680

The CVE concerns alibabacloud-rds-openapi-mcp-server where an MCP endpoint bound to all network interfaces by default exposes MCP tools. Root cause: improper exposure caused by insecure default binding. Impact: remote attackers can access exposed MCP tools via network without authentication? The ...

EUVD-2026-49727

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...

Alibaba Cloud Linux 3 : 0211: xorg-x11-server-Xwayland (ALINUX3-SA-2026:0211)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0211 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55999: Local attackers with a X...

Alibaba Cloud Linux 3 : 0216: golang (ALINUX3-SA-2026:0216)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0216 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-27145:...

Alibaba Cloud Linux 3 : 0213: xorg-x11-server (ALINUX3-SA-2026:0213)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0213 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-55999: Local attackers with a X connection...

Alibaba Cloud Linux 3 : 0215: pacemaker (ALINUX3-SA-2026:0215)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0215 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-10649: A flaw was found in Pacemaker. An...

Alibaba Cloud Linux 3 : 0222: grafana (ALINUX3-SA-2026:0222)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0222 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-39821: The ToASCII and ToUnicode functions...

Alibaba Cloud Linux 3 : 0220: git-lfs (ALINUX3-SA-2026:0220)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0220 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-33811: When using LookupCNAME with the cgo...

Alibaba Cloud Linux 3 : 0226: python3 (ALINUX3-SA-2026:0226)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0226 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-15308: The incremental HTML parser...

Alibaba Cloud Linux 3 : 0209: kernel (ALINUX3-SA-2026:0209)

"The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0209 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-43499: In the Linux kernel, the...

Alibaba Cloud Linux 3 : 0197: perl-HTTP-Daemon (ALINUX3-SA-2026:0197)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0197 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-8450: HTTP::Daemon versions before 6.17 fo...

Alibaba Cloud Linux 3 : 0193: grafana-pcp (ALINUX3-SA-2026:0193)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0193 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-39821: The ToASCII and ToUnicode functions...

Alibaba Cloud Linux 3 : 0203: cups (ALINUX3-SA-2026:0203)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0203 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-34980: OpenPrinting CUPS is an open source...

Alibaba Cloud Linux 3 : 0194: libreoffice (ALINUX3-SA-2026:0194)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0194 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-8357: LibreOffice Calc compiles cell...

Alibaba Cloud Linux 3 : 0201: python-urllib3 (ALINUX3-SA-2026:0201)

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0201 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-44431: urllib3 is an HTTP client library f...

Alibaba Cloud Linux 3 : 0199: libtasn1 (ALINUX3-SA-2026:0199)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0199 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-13151: Stack-based buffer overflow in...

Alibaba Cloud Linux 3 : 0200: libsolv (ALINUX3-SA-2026:0200)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0200 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-48864: A flaw was found in libsolv. This...

Alibaba Cloud Linux 3 : 0198: podman and buildah (ALINUX3-SA-2026:0198)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0198 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-25679: url.Parse insufficiently...