May 13 2026 Bug hunter tracks down three massive MCP flaws and one vendor won't fix theirs Source Apache, Alibaba databases vulnerable and only one has a patch [...]