All 3 CVE vulnerabilities found in meta-ads-mcp, with AI-generated Chinese analysis, references, and POCs.
Vendor: pipeboard-co
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54549 | Meta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch CWE-918 | 8.3 | High | 2026-09-15 |
| CVE-2026-54547 | Meta Ads MCP: X-Pipeboard-Token Header Auth Bypass Reuses Operator Meta Token CWE-287 | 7.4 | High | 2026-09-15 |
| CVE-2026-48039 | Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token CWE-287 | 9.1 | Critical | 2026-08-07 |
All 3 known CVE vulnerabilities affecting meta-ads-mcp with full Chinese analysis, references, and POCs where available.