<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>0dayNews — MCP Servers</title><description>Vulnerabilities in Model Context Protocol (MCP) servers — the integration layer connecting large language models to external data sources and APIs. Recurring classes include server-side request forgery (SSRF), path traversal, and injection flaws across open-source MCP projects deployed as AI infrastructure sidecars. Combined article + CVE feed for the MCP Servers beat.</description><link>https://0daynews.com/</link><language>en-us</language><item><title>Ten MCP Server CVEs Drop in a Single Day</title><link>https://0daynews.com/articles/2026-08-09-mcp-server-ssrf-path-traversal-ten-cves-one-day/</link><guid isPermaLink="true">https://0daynews.com/articles/2026-08-09-mcp-server-ssrf-path-traversal-ten-cves-one-day/</guid><description>Ten MCP server CVEs hit NVD on August 9 — all SSRF or path traversal. Same two classes, ten different projects, most maintainers silent on coordinated disclosure.</description><pubDate>Sun, 09 Aug 2026 22:15:00 GMT</pubDate><category>MCP Servers</category><category>article</category></item></channel></rss>