CyberSecBulletin

TencentCloudBase vulnerabilities

We track 1 vulnerability in TencentCloudBase products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 28, 2026.

1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score

Latest TencentCloudBase vulnerabilities

  • 7.3 High severity

    CloudBase-MCP: Server-Side Request Forgery

    CVE-2026-7221TencentCloudBase

    A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side re