Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-05-11 · source-backed
May 2026 produced CVEs for Oracle SQL injection, nginx-ui CVSS 9.8 full takeover, and code-mcp command injection. OX Security documented a systemic RCE flaw across packages with 150M+ downloads. Anthropic has said the behavior is "expected." That's their position. My position: audit every MCP server you connect to. The ecosystem is growing faster than anyone can vet.
Each link below shares sources, entities, or timing with this story.
Anthropic released MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVEs, CVSS, MCP; overlapping topics (cves, injection, server).
Anthropic released MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVEs, MCP, OX Security; overlapping topics (anthropic, audit, command, cves, download).
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVEs, MCP, RCE; overlapping topics (anthropic, audit, command, cves, injection).
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVEs, MCP, RCE; overlapping topics (anthropic, audit, critical, cves, server).
Adversa AI criticizes MCP / Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Adversa AI criticizes MCP); both cover CVSS, MCP, RCE; reported by the same outlet (adversa.ai).
Anthropic released MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVSS, MCP, RCE; overlapping topics (anthropic, audit, cvss).
Claude Code uses MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover CVEs, CVSS, MCP, RCE; overlapping topics (audit, critical, cves).
Anthropic released MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, CVSS, MCP, RCE; overlapping topics (anthropic, audit, cvss).