Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-07-15 · source-backed
Aggregated 2026 tracking from the Vulnerable MCP Project and Practical DevSecOps shows the MCP attack surface is now well-catalogued: command injection leads, with exposed-listener and SSRF classes close behind. (Practical DevSecOps) The upside of a catalogued attack surface is that pre-ship threat modeling against known classes is now table stakes, not guesswork. If you ship an MCP server, test it against command injection and SSRF before anyone else does it for you.
Each link below shares sources, entities, or timing with this story.
Anthropic released MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released MCP); both cover CVEs, MCP; overlapping topics (attack, class, command, cves, injection).
OpenAI supports MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (OpenAI supports MCP); both cover MCP, SSRF; overlapping topics (against, attack, injection).
Claude Code uses MCP / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover CVEs, MCP, Practical DevSecOps; reported by the same outlet (practical-devsecops.com).
Cursor uses MCP / Shared entities / Same source / What happened next
Linked by a graph relationship (Cursor uses MCP); both cover MCP, Practical DevSecOps; cite the same source (Practical DevSecOps).
OX Security criticizes MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (OX Security criticizes MCP); both cover CVEs, MCP; overlapping topics (anyone, command, cves, injection).
OpenAI supports MCP / Shared entity: MCP / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (OpenAI supports MCP); both cover MCP; cite the same source (Practical DevSecOps).
VS Code supports MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (VS Code supports MCP); both cover CVEs, MCP; overlapping topics (attack, cves).
Microsoft supports MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Microsoft supports MCP); both cover CVEs, MCP; overlapping topics (cves, injection).