{"vulnerability": "CVE-2026-1951", "sightings": [{"uuid": "cc7b6837-ce7c-43a5-9fd0-4cb2921ef584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1951", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116458509219616758", "content": "", "creation_timestamp": "2026-04-24T07:30:27.708320Z"}, {"uuid": "995bce9b-4160-49f6-8224-c8c1f217a828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1951", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mk7yyn3gto2v", "content": "", "creation_timestamp": "2026-04-24T07:30:29.463841Z"}, {"uuid": "0b4f2bf3-fb05-42fa-9035-7e3034da49e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1951", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mka3h3cidd2n", "content": "", "creation_timestamp": "2026-04-24T08:14:21.538491Z"}, {"uuid": "a9ca9020-2120-4476-bf87-f2c44d61b78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1951", "type": "published-proof-of-concept", "source": "Telegram/X1JyBiiNx_oSYu-ldDRrQFjaq89QLca8O12-lN-DTEtiPeU", "content": "", "creation_timestamp": "2026-04-24T09:16:19.000000Z"}, {"uuid": "16b84df9-c550-42fb-86bc-19577b55f7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1951", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mllxtybizq2s", "content": "\ud83d\udccc CVE-2026-1951 - Delta Electronics AS320T has no checking of the length of the buffer with the directory name\n\n vulnerability. https://www.cyberhub.blog/cves/CVE-2026-1951", "creation_timestamp": "2026-05-11T19:07:07.600694Z"}, {"uuid": "1f3806cd-7a38-4641-a11a-0efbd620ba67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1951", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mllxtybizq2s", "content": "\ud83d\udccc CVE-2026-1951 - Delta Electronics AS320T has no checking of the length of the buffer with the directory name\n\n vulnerability. https://www.cyberhub.blog/cves/CVE-2026-1951", "creation_timestamp": "2026-05-11T19:07:07.616126Z"}, {"uuid": "80f5d7be-b8d2-47ac-9df9-4422d2509b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19516", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117075347103329501", "content": "Grafana MCP Server hit by CRITICAL SSRF (CVE-2026-19516, CVSS 9.1) via X-Grafana-URL header. Attackers can access internal endpoints and metadata. Restrict access & monitor usage until patch available. https://radar.offseq.com/threat/cve-2026-19516-cwe-918-in-grafana-grafana-mcp-server-3995ac1dff45c6f5 #OffSeq #Grafana #SSRF #Vuln", "creation_timestamp": "2026-08-11T06:00:26.535949Z"}, {"uuid": "49dbf790-36c2-46d8-8bb9-421cb5db6827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19516", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msrwrzr6an25", "content": "Grafana MCP Server faces CRITICAL SSRF (CVE-2026-19516, CVSS 9.1). Unrestricted outbound requests risk internal data exposure. Restrict access & monitor X-Grafana-URL header. Details: https://radar.offseq.com/threat/cve-2026-19516-cwe-918-in-grafana-grafana-mcp-server-3995ac1dff45c6f5 #OffSeq #Gr...", "creation_timestamp": "2026-08-11T06:00:28.585100Z"}, {"uuid": "4b848ef0-2ed2-49ad-ae20-3ff5cc2c5d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mssyhz6atn2c", "content": "~Cybergcca~\n4 advisories covering Grafana, HashiCorp Vault, SAP, and AMD EPYC vulnerabilities\u2014apply updates promptly.\n-\nIOCs: CVE-2026-19516\n-\n#PatchNow #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-11T16:03:19.255963Z"}, {"uuid": "3118fe8e-5173-4223-aa37-9fb8d29ce137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-796", "content": "", "creation_timestamp": "2026-08-11T16:15:03.642509Z"}]}