https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 13 Sep 2026 08:41:30 +0000 https://vulnerability.circl.lu/sighting/bf2926aa-41a3-4f69-868a-e08c23ede9ca/export {"uuid": "bf2926aa-41a3-4f69-868a-e08c23ede9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-06T00:01:03.572885Z"} {"uuid": "bf2926aa-41a3-4f69-868a-e08c23ede9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-06T00:01:03.572885Z"} https://vulnerability.circl.lu/sighting/bf2926aa-41a3-4f69-868a-e08c23ede9ca/export Sun, 06 Sep 2026 00:01:03 +0000 https://vulnerability.circl.lu/sighting/8fb16468-123a-45ce-a7de-07379a0258f4/export {"uuid": "8fb16468-123a-45ce-a7de-07379a0258f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3muqxisfb7x24", "content": "Valid, But Never Issued: Session Spoofing and SSRF in Grafana MCP (CVE-2026-19516) #patchmanagement", "creation_timestamp": "2026-09-05T07:30:55.473668Z"} {"uuid": "8fb16468-123a-45ce-a7de-07379a0258f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3muqxisfb7x24", "content": "Valid, But Never Issued: Session Spoofing and SSRF in Grafana MCP (CVE-2026-19516) #patchmanagement", "creation_timestamp": "2026-09-05T07:30:55.473668Z"} https://vulnerability.circl.lu/sighting/8fb16468-123a-45ce-a7de-07379a0258f4/export Sat, 05 Sep 2026 07:30:55 +0000 https://vulnerability.circl.lu/sighting/0d74c2c8-5821-467b-8079-7f2f3404b7de/export {"uuid": "0d74c2c8-5821-467b-8079-7f2f3404b7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9970", "content": "\ud83d\udea8 Unauthenticated attackers could turn Grafana MCP servers into proxies for internal networks and cloud metadata endpoints.\n\nPillar Security research team found affected releases accepted self-generated session IDs in place of authentication, exposing the server's Grafana service account to anyone who could reach it.\n\nA chained SSRF (CVE-2026-19516, CVSS 9.1) then let callers pick the destination, method, headers, and body of outbound requests. The server has passed 1.9 million Docker Hub downloads; Grafana shipped fixes in mcp-grafana v1.1.0.\n\nFull details here: https://thn.news/grafana-mcp-flaws", "creation_timestamp": "2026-09-05T01:00:28.791065Z"} {"uuid": "0d74c2c8-5821-467b-8079-7f2f3404b7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9970", "content": "\ud83d\udea8 Unauthenticated attackers could turn Grafana MCP servers into proxies for internal networks and cloud metadata endpoints.\n\nPillar Security research team found affected releases accepted self-generated session IDs in place of authentication, exposing the server's Grafana service account to anyone who could reach it.\n\nA chained SSRF (CVE-2026-19516, CVSS 9.1) then let callers pick the destination, method, headers, and body of outbound requests. The server has passed 1.9 million Docker Hub downloads; Grafana shipped fixes in mcp-grafana v1.1.0.\n\nFull details here: https://thn.news/grafana-mcp-flaws", "creation_timestamp": "2026-09-05T01:00:28.791065Z"} https://vulnerability.circl.lu/sighting/0d74c2c8-5821-467b-8079-7f2f3404b7de/export Sat, 05 Sep 2026 01:00:28 +0000 https://vulnerability.circl.lu/sighting/1ad5e6b0-8c77-49f3-8299-702968e4e04d/export {"uuid": "1ad5e6b0-8c77-49f3-8299-702968e4e04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "Telegram/lpcaxohlevWOQx_YAX_9XUMgFve84tVn0viR4d8tnkij6ww", "content": "", "creation_timestamp": "2026-09-05T01:00:21.184857Z"} {"uuid": "1ad5e6b0-8c77-49f3-8299-702968e4e04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "Telegram/lpcaxohlevWOQx_YAX_9XUMgFve84tVn0viR4d8tnkij6ww", "content": "", "creation_timestamp": "2026-09-05T01:00:21.184857Z"} https://vulnerability.circl.lu/sighting/1ad5e6b0-8c77-49f3-8299-702968e4e04d/export Sat, 05 Sep 2026 01:00:21 +0000 https://vulnerability.circl.lu/sighting/35230892-2027-462a-946a-249015836865/export {"uuid": "35230892-2027-462a-946a-249015836865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-05T01:00:04.478841Z"} {"uuid": "35230892-2027-462a-946a-249015836865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-05T01:00:04.478841Z"} https://vulnerability.circl.lu/sighting/35230892-2027-462a-946a-249015836865/export Sat, 05 Sep 2026 01:00:04 +0000 https://vulnerability.circl.lu/sighting/25557b66-f626-46c3-ba54-d831124eb1ee/export {"uuid": "25557b66-f626-46c3-ba54-d831124eb1ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "Telegram/lpcaxohlevWOQx_YAX_9XUMgFve84tVn0viR4d8tnkij6ww", "content": "", "creation_timestamp": "2026-09-04T18:00:03.645045Z"} {"uuid": "25557b66-f626-46c3-ba54-d831124eb1ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "Telegram/lpcaxohlevWOQx_YAX_9XUMgFve84tVn0viR4d8tnkij6ww", "content": "", "creation_timestamp": "2026-09-04T18:00:03.645045Z"} https://vulnerability.circl.lu/sighting/25557b66-f626-46c3-ba54-d831124eb1ee/export Fri, 04 Sep 2026 18:00:03 +0000 https://vulnerability.circl.lu/sighting/b9616421-f6ca-4a0f-b229-23975e20046f/export {"uuid": "b9616421-f6ca-4a0f-b229-23975e20046f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9970", "content": "\ud83d\udea8 Unauthenticated attackers could turn Grafana MCP servers into proxies for internal networks and cloud metadata endpoints.\n\nPillar Security research team found affected releases accepted self-generated session IDs in place of authentication, exposing the server's Grafana service account to anyone who could reach it.\n\nA chained SSRF (CVE-2026-19516, CVSS 9.1) then let callers pick the destination, method, headers, and body of outbound requests. The server has passed 1.9 million Docker Hub downloads; Grafana shipped fixes in mcp-grafana v1.1.0.\n\nFull details here: https://thn.news/grafana-mcp-flaws", "creation_timestamp": "2026-09-04T13:00:04.761587Z"} {"uuid": "b9616421-f6ca-4a0f-b229-23975e20046f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9970", "content": "\ud83d\udea8 Unauthenticated attackers could turn Grafana MCP servers into proxies for internal networks and cloud metadata endpoints.\n\nPillar Security research team found affected releases accepted self-generated session IDs in place of authentication, exposing the server's Grafana service account to anyone who could reach it.\n\nA chained SSRF (CVE-2026-19516, CVSS 9.1) then let callers pick the destination, method, headers, and body of outbound requests. The server has passed 1.9 million Docker Hub downloads; Grafana shipped fixes in mcp-grafana v1.1.0.\n\nFull details here: https://thn.news/grafana-mcp-flaws", "creation_timestamp": "2026-09-04T13:00:04.761587Z"} https://vulnerability.circl.lu/sighting/b9616421-f6ca-4a0f-b229-23975e20046f/export Fri, 04 Sep 2026 13:00:04 +0000 https://vulnerability.circl.lu/sighting/985f4947-1ced-49c4-90c0-796fdd850129/export {"uuid": "985f4947-1ced-49c4-90c0-796fdd850129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xjn3nwj2g", "content": "~Cybergcca~\nPaperCut CVE-2026-81578 and CVE-2026-82078 are exploited in the wild; patch affected products.\n-\nIOCs: CVE-2026-81578, CVE-2026-82078, CVE-2026-19516\n-\n#PaperCut #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-29T13:16:08.083570Z"} {"uuid": "985f4947-1ced-49c4-90c0-796fdd850129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xjn3nwj2g", "content": "~Cybergcca~\nPaperCut CVE-2026-81578 and CVE-2026-82078 are exploited in the wild; patch affected products.\n-\nIOCs: CVE-2026-81578, CVE-2026-82078, CVE-2026-19516\n-\n#PaperCut #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-29T13:16:08.083570Z"} https://vulnerability.circl.lu/sighting/985f4947-1ced-49c4-90c0-796fdd850129/export Sat, 29 Aug 2026 13:16:08 +0000 https://vulnerability.circl.lu/sighting/e8e9a56b-1606-4360-b79d-630b86ec1623/export {"uuid": "e8e9a56b-1606-4360-b79d-630b86ec1623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-860", "content": "", "creation_timestamp": "2026-08-28T16:15:12.445366Z"} {"uuid": "e8e9a56b-1606-4360-b79d-630b86ec1623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-860", "content": "", "creation_timestamp": "2026-08-28T16:15:12.445366Z"} https://vulnerability.circl.lu/sighting/e8e9a56b-1606-4360-b79d-630b86ec1623/export Fri, 28 Aug 2026 16:15:12 +0000 https://vulnerability.circl.lu/sighting/3118fe8e-5173-4223-aa37-9fb8d29ce137/export {"uuid": "3118fe8e-5173-4223-aa37-9fb8d29ce137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-796", "content": "", "creation_timestamp": "2026-08-11T16:15:03.642509Z"} {"uuid": "3118fe8e-5173-4223-aa37-9fb8d29ce137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-796", "content": "", "creation_timestamp": "2026-08-11T16:15:03.642509Z"} https://vulnerability.circl.lu/sighting/3118fe8e-5173-4223-aa37-9fb8d29ce137/export Tue, 11 Aug 2026 16:15:03 +0000