{"vulnerability": "cve-2026-5126", "sightings": [{"uuid": "ef8ec242-f0c1-43a2-9eaf-c5f329c28040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5126", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miciww6xch22", "content": "", "creation_timestamp": "2026-03-30T20:30:47.366268Z"}, {"uuid": "60b4e651-d021-41d4-a564-48fff1fea5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51269", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mrufgkfb7t2s", "content": "HIGH severity CVE just published in ESP32:\n\nCVE-2026-51269. schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the connecttospeech() function. The application accepts attacker-controlled long speech text input, perf\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-51269", "creation_timestamp": "2026-07-30T12:02:36.826846Z"}, {"uuid": "7e4a382e-e64e-4040-9954-0456d3f715e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51261", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrv476gfh42k", "content": "CVE-2026-51261\nThe schreibfaul1 ESP32-audioI2S software has a bug that can cause data corruption and device crashes when used with multiple tasks. This can lead to memory corruption and potentially allow unauthorized code to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T18:50:05.238811Z"}, {"uuid": "b39636ba-d700-44d2-8186-30793d56c8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51268", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrv477ouem2k", "content": "CVE-2026-51268\nThe schreibfaul1 ESP32-audioI2S 3.4.5 software fails to properly check the size of incoming data, allowing a malicious input to potentially cause data corruption and lead to system instability or crashes. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T18:50:06.690529Z"}, {"uuid": "2d0b3b69-0770-4145-82b2-ba8b919f60b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51268", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mrva6zooad2n", "content": "Critical CVE landed today in ESP32:\n\nCVE-2026-51268. schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the host parsing logic. The dismantle_host() function parses untrusted host and URL input, and subsequent code\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-51268", "creation_timestamp": "2026-07-30T20:01:35.404349Z"}, {"uuid": "4e83fb0f-dde7-4680-a2b3-d9775eac8d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51260", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrq4m7sgsu2y", "content": "CVE-2026-51260\nA security issue in the ESP32-audioI2S library allows an attacker to send malicious audio data that can cause the system to crash or behave unexpectedly. This affects systems using the ESP32-audioI2S library\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-28T19:14:04.251200Z"}, {"uuid": "e98e41d3-66e9-42a8-9fb3-24c508f87a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51263", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrq4psk2dz2z", "content": "CVE-2026-51263\nA security flaw in ESP32-audioI2S version 3.4.5 allows an attacker to send large amounts of malicious data, potentially causing the system to crash or behave unexpectedly. This could happen if an attacker sends\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-28T19:16:04.770243Z"}, {"uuid": "6cc9e317-ccca-41fd-a9b7-8d16c718dcd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51266", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrq4ptqcxj2z", "content": "CVE-2026-51266\nA flaw in ESP32-audioI2S version 3.4.5 can be exploited by an attacker to execute arbitrary code on the system. This is a serious security issue because an attacker could potentially take control of the system.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-28T19:16:05.820761Z"}, {"uuid": "f9058554-62be-4be2-8f0e-5dacb7335693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51267", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrqa35kalo2r", "content": "CVE-2026-51267\nA security flaw in the ESP32-audioI2S software allows attackers to send malicious URLs that can cause the system to crash or potentially allow unauthorized access. This affects any device using the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-28T20:16:06.411430Z"}, {"uuid": "b64d8b81-ce14-4ee3-97e4-ef1e7abd1b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51263", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mrr26aj6zb2t", "content": "Critical CVE landed today in ESP32:\n\nCVE-2026-51263. schreibfaul1 ESP32-audioI2S 3.4.5 is vulnerable to Buffer Overflow. The Audio::openai_speech function in the Audio library manually constructs JSON request bodies and HTTP request headers by dire\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-51263", "creation_timestamp": "2026-07-29T04:03:07.791270Z"}, {"uuid": "a33a590c-2a22-4347-97da-4e9364179c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51266", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mrrhlisiup2n", "content": "Critical CVE landed today in ESP32:\n\nCVE-2026-51266. schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the HTTP request header construction logic. The application dynamically splices attacker-controlled host name,\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-51266", "creation_timestamp": "2026-07-29T08:03:11.331513Z"}, {"uuid": "b752d371-f73d-4bde-bbde-396b9b33bc93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51267", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mrruxvmoo42o", "content": "Critical CVE landed today in ESP32:\n\nCVE-2026-51267. schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the URL path concatenation and encoding module. The application splices untrusted extension path and attacker-c\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-51267", "creation_timestamp": "2026-07-29T12:02:45.749070Z"}]}