Alibaba vulnerabilities

Products

• Nacos 5
• Fastjson 4

Newest

• alibaba cloud rds openapi mcp server MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server CVE-2026-9680 5.8 MediumJuly 28, 2026
• alibaba fastjson Remote Code Execution in fastjson 1.2.68–1.2.83 CVE-2026-16723 Public exploit 9.0 CriticalJuly 23, 2026
• alibaba fastjson, red hat openshift service mesh 2, build of apache camel for spring boot 4 +5 more +7 more FASTJSON Includes Functionality from Untrusted Control Sphere CVE-2025-70974 Fix available 10.0 CriticalJanuary 9, 2026
• alibaba t-head xuantie c910, t-head xuantie c920 +1 more The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON... CVE-2024-44067 8.4 HighAugust 19, 2024
• alibaba tengine The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable... CVE-2020-21699 7.5 HighAugust 22, 2023
• alibaba nacos Use of Hard-coded Credentials in Nacos CVE-2021-43116 Public exploit 8.8 HighJuly 5, 2022
• alibaba fastjson, oracle communications cloud native core unified data repository +1 more Deserialization of Untrusted Data CVE-2022-25845 Public exploitFix available EPSS 18.7% 8.1 HighJune 10, 2022
• alibaba nacos Cross-site Scripting in Nacos CVE-2021-44667 Public exploitFix available 6.1 MediumMarch 11, 2022
• alibaba druid In Druid 1.2.3, visiting the path with parameter in a certain function can lead to directory... CVE-2021-33800 7.5 HighNovember 3, 2021
• alibaba nacos Authentication bypass CVE-2021-29442 Public exploitFix available EPSS 64.2% 8.6 HighApril 27, 2021
• alibaba nacos Authentication bypass CVE-2021-29441 Public exploitFix available EPSS 83.2% 8.6 HighApril 27, 2021
• alibaba nacos Incorrect Access Control in Nacos CVE-2020-19676 Fix available 5.3 MediumSeptember 30, 2020
• alibaba fastjson, pippo +1 more Improper Input Validation in alilibaba:fastjson CVE-2017-18349 Public exploitFix available EPSS 38.8% 9.8 CriticalOctober 23, 2018
• alibaba The alibaba (aka com.alibaba.wireless) application 4.1.0.0 for Android does not verify X.509... CVE-2014-5976 5.4 MediumSeptember 20, 2014
• alibaba alipay activex control The Alibaba Alipay PTA Module ActiveX control (PTA.DLL) allows remote attackers to execute... CVE-2007-0827 Public exploit 6.8 MediumFebruary 7, 2007