{"vulnerability": "CVE-2026-19516", "sightings": [{"uuid": "80f5d7be-b8d2-47ac-9df9-4422d2509b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19516", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117075347103329501", "content": "Grafana MCP Server hit by CRITICAL SSRF (CVE-2026-19516, CVSS 9.1) via X-Grafana-URL header. Attackers can access internal endpoints and metadata. Restrict access &amp; monitor usage until patch available. https://radar.offseq.com/threat/cve-2026-19516-cwe-918-in-grafana-grafana-mcp-server-3995ac1dff45c6f5 #OffSeq #Grafana #SSRF #Vuln", "creation_timestamp": "2026-08-11T06:00:26.535949Z"}, {"uuid": "49dbf790-36c2-46d8-8bb9-421cb5db6827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19516", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msrwrzr6an25", "content": "Grafana MCP Server faces CRITICAL SSRF (CVE-2026-19516, CVSS 9.1). Unrestricted outbound requests risk internal data exposure. Restrict access &amp; monitor X-Grafana-URL header. Details: https://radar.offseq.com/threat/cve-2026-19516-cwe-918-in-grafana-grafana-mcp-server-3995ac1dff45c6f5 #OffSeq #Gr...", "creation_timestamp": "2026-08-11T06:00:28.585100Z"}, {"uuid": "4b848ef0-2ed2-49ad-ae20-3ff5cc2c5d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mssyhz6atn2c", "content": "~Cybergcca~\n4 advisories covering Grafana, HashiCorp Vault, SAP, and AMD EPYC vulnerabilities\u2014apply updates promptly.\n-\nIOCs: CVE-2026-19516\n-\n#PatchNow #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-11T16:03:19.255963Z"}, {"uuid": "3118fe8e-5173-4223-aa37-9fb8d29ce137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-796", "content": "", "creation_timestamp": "2026-08-11T16:15:03.642509Z"}]}