{"vulnerability": "cve-2026-16498", "sightings": [{"uuid": "b6d52545-29a3-4111-b13a-cc30c1c53550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16498", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msb6zqym2e2u", "content": "Terraform MCP Server Flaw CVE-2026-16498 Scores CVSS 10.0", "creation_timestamp": "2026-08-04T14:12:43.971206Z"}, {"uuid": "2cc554a0-bc95-4900-98ed-2f7295dbd318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16498", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrq4tetkat23", "content": "CVE-2026-16498 - tooling\nThe Terraform MCP Server before version 1.1.0 allows one user's credentials to be used by other users. This means that if one user's credentials are compromised, an attacker could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tooling #hashicorp #CVE #infosec", "creation_timestamp": "2026-07-28T19:18:04.340622Z"}]}