https://vulnerability.circl.lu/sightings/feed 2026-09-13T08:41:31.520939+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/bf2926aa-41a3-4f69-868a-e08c23ede9ca/export 2026-09-13T08:41:31.546456+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bf2926aa-41a3-4f69-868a-e08c23ede9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-06T00:01:03.572885Z"} 2026-09-06T00:01:03.572885+00:00 https://vulnerability.circl.lu/sighting/8fb16468-123a-45ce-a7de-07379a0258f4/export 2026-09-13T08:41:31.548434+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8fb16468-123a-45ce-a7de-07379a0258f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3muqxisfb7x24", "content": "Valid, But Never Issued: Session Spoofing and SSRF in Grafana MCP (CVE-2026-19516) #patchmanagement", "creation_timestamp": "2026-09-05T07:30:55.473668Z"} 2026-09-05T07:30:55.473668+00:00 https://vulnerability.circl.lu/sighting/0d74c2c8-5821-467b-8079-7f2f3404b7de/export 2026-09-13T08:41:31.548646+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0d74c2c8-5821-467b-8079-7f2f3404b7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9970", "content": "\ud83d\udea8 Unauthenticated attackers could turn Grafana MCP servers into proxies for internal networks and cloud metadata endpoints.\n\nPillar Security research team found affected releases accepted self-generated session IDs in place of authentication, exposing the server's Grafana service account to anyone who could reach it.\n\nA chained SSRF (CVE-2026-19516, CVSS 9.1) then let callers pick the destination, method, headers, and body of outbound requests. The server has passed 1.9 million Docker Hub downloads; Grafana shipped fixes in mcp-grafana v1.1.0.\n\nFull details here: https://thn.news/grafana-mcp-flaws", "creation_timestamp": "2026-09-05T01:00:28.791065Z"} 2026-09-05T01:00:28.791065+00:00 https://vulnerability.circl.lu/sighting/1ad5e6b0-8c77-49f3-8299-702968e4e04d/export 2026-09-13T08:41:31.548828+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1ad5e6b0-8c77-49f3-8299-702968e4e04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "Telegram/lpcaxohlevWOQx_YAX_9XUMgFve84tVn0viR4d8tnkij6ww", "content": "", "creation_timestamp": "2026-09-05T01:00:21.184857Z"} 2026-09-05T01:00:21.184857+00:00 https://vulnerability.circl.lu/sighting/35230892-2027-462a-946a-249015836865/export 2026-09-13T08:41:31.548984+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "35230892-2027-462a-946a-249015836865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-05T01:00:04.478841Z"} 2026-09-05T01:00:04.478841+00:00 https://vulnerability.circl.lu/sighting/25557b66-f626-46c3-ba54-d831124eb1ee/export 2026-09-13T08:41:31.549134+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "25557b66-f626-46c3-ba54-d831124eb1ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "Telegram/lpcaxohlevWOQx_YAX_9XUMgFve84tVn0viR4d8tnkij6ww", "content": "", "creation_timestamp": "2026-09-04T18:00:03.645045Z"} 2026-09-04T18:00:03.645045+00:00 https://vulnerability.circl.lu/sighting/b9616421-f6ca-4a0f-b229-23975e20046f/export 2026-09-13T08:41:31.549284+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b9616421-f6ca-4a0f-b229-23975e20046f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9970", "content": "\ud83d\udea8 Unauthenticated attackers could turn Grafana MCP servers into proxies for internal networks and cloud metadata endpoints.\n\nPillar Security research team found affected releases accepted self-generated session IDs in place of authentication, exposing the server's Grafana service account to anyone who could reach it.\n\nA chained SSRF (CVE-2026-19516, CVSS 9.1) then let callers pick the destination, method, headers, and body of outbound requests. The server has passed 1.9 million Docker Hub downloads; Grafana shipped fixes in mcp-grafana v1.1.0.\n\nFull details here: https://thn.news/grafana-mcp-flaws", "creation_timestamp": "2026-09-04T13:00:04.761587Z"} 2026-09-04T13:00:04.761587+00:00 https://vulnerability.circl.lu/sighting/985f4947-1ced-49c4-90c0-796fdd850129/export 2026-09-13T08:41:31.549440+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "985f4947-1ced-49c4-90c0-796fdd850129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xjn3nwj2g", "content": "~Cybergcca~\nPaperCut CVE-2026-81578 and CVE-2026-82078 are exploited in the wild; patch affected products.\n-\nIOCs: CVE-2026-81578, CVE-2026-82078, CVE-2026-19516\n-\n#PaperCut #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-29T13:16:08.083570Z"} 2026-08-29T13:16:08.083570+00:00 https://vulnerability.circl.lu/sighting/e8e9a56b-1606-4360-b79d-630b86ec1623/export 2026-09-13T08:41:31.549599+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "e8e9a56b-1606-4360-b79d-630b86ec1623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-860", "content": "", "creation_timestamp": "2026-08-28T16:15:12.445366Z"} 2026-08-28T16:15:12.445366+00:00 https://vulnerability.circl.lu/sighting/3118fe8e-5173-4223-aa37-9fb8d29ce137/export 2026-09-13T08:41:31.550764+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "3118fe8e-5173-4223-aa37-9fb8d29ce137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-796", "content": "", "creation_timestamp": "2026-08-11T16:15:03.642509Z"} 2026-08-11T16:15:03.642509+00:00