{"vulnerability": "CVE-2026-51267", "sightings": [{"uuid": "f9058554-62be-4be2-8f0e-5dacb7335693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51267", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrqa35kalo2r", "content": "CVE-2026-51267\nA security flaw in the ESP32-audioI2S software allows attackers to send malicious URLs that can cause the system to crash or potentially allow unauthorized access. This affects any device using the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-28T20:16:06.411430Z"}, {"uuid": "b752d371-f73d-4bde-bbde-396b9b33bc93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51267", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mrruxvmoo42o", "content": "Critical CVE landed today in ESP32:\n\nCVE-2026-51267. schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the URL path concatenation and encoding module. The application splices untrusted extension path and attacker-c\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-51267", "creation_timestamp": "2026-07-29T12:02:45.749070Z"}]}