Vulnerabilities

TI-2026-39388 CVE-2026-54549 · GHSA-45gf-fjxp-cjpq

Meta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch

HIGH 75

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads.

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.00399 Published 2026-09-15 Fixed in 1.0.115 CWE-918

TI-2026-39386 CVE-2026-54547 · GHSA-2v2f-mvfg-ph56

HIGH 68

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00518 Published 2026-09-15 Fixed in 1.0.115 CWE-287

TI-2026-35482 CVE-2026-48039 · GHSA-9gw6-46qc-99vr

HIGH 80

Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00589 Published 2026-08-07 Fixed in 1.0.109 CWE-287