MCP security issues, November 2026

Every field below comes from a primary source: NVD, the GitHub Security Advisory (GHSA) database, OSV.dev, or a vendor's or marketplace's own notice. Anything we could not find there is marked not confirmed. We did not run any exploit. This is not a security audit.

Started 2026-11-01; last checked 2026-11-01. Method: how we check advisories.

Advisories on listed servers

None so far. Items published in November 2026 will be added here after they are confirmed from a primary source. Items published in late October are on the October 2026 page.