CRITICAL
pipeboard-co
CVE published 2026-08-07
CVE-2026-48039
CVE-2026-48039 debrief: Meta Ads MCP unauthenticated request forwarding allows network-reachable callers to invoke MCP tools without authentication, potentially exposing sensitive data and credentials. Defenders should assess exposure, prioritize remediation to version 1.0.109 or later, and verify authentication mechanisms for MCP tool handlers to prevent data exposure and credential misuse. The vulnerabi [truncated]