{"vulnerability": "cve-2026-51266", "sightings": [{"uuid": "6cc9e317-ccca-41fd-a9b7-8d16c718dcd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51266", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrq4ptqcxj2z", "content": "CVE-2026-51266\nA flaw in ESP32-audioI2S version 3.4.5 can be exploited by an attacker to execute arbitrary code on the system. This is a serious security issue because an attacker could potentially take control of the system.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-28T19:16:05.820761Z"}, {"uuid": "a33a590c-2a22-4347-97da-4e9364179c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51266", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mrrhlisiup2n", "content": "Critical CVE landed today in ESP32:\n\nCVE-2026-51266. schreibfaul1 ESP32-audioI2S 3.4.5 has a heap-based buffer overflow vulnerability in the HTTP request header construction logic. The application dynamically splices attacker-controlled host name,\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-51266", "creation_timestamp": "2026-07-29T08:03:11.331513Z"}]}