https://mcp-news.com/news/ash-ai-mcp-origin-bypass-fixed-in-hours MCP News en 2026-08-31 Ash AI patched a spoofable MCP origin check and published the CVE the same night, five hours from reservation to record https://mcp-news.com/news/mcphub-eight-cve-records-one-batch MCP News en 2026-08-31 Eight CVE records land at once for MCPHub, and every one of them trails a shipped fix https://mcp-news.com/news/microsoft-advertising-mcp-server-announced MCP News en 2026-08-31 Microsoft Advertising announces its MCP server, read-only in open flight, five weeks after the setup docs went live https://mcp-news.com/news/rmcp-3-2-0-oauth-credential-stores MCP News en 2026-08-31 rmcp 3.2.0 coordinates OAuth refreshes through credential stores and adds request-state key rotation