{"vulnerability": "cve-2026-63087", "sightings": [{"uuid": "09338e0c-e913-452a-bf5f-b834ce11494d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63087", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqromxze3h2c", "content": "CVE-2026-63087 - oncall\nAn attacker can access Grafana OnCall without a password by sending a specific request to the plugin install endpoint. This allows them to create new users, revoke legitimate access, and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oncall #CVE #infosec", "creation_timestamp": "2026-07-16T16:44:05.680111Z"}, {"uuid": "77de3884-472e-45b6-a965-4d8e1ada6fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63087", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqrwqns4ep22", "content": "CVE-2026-63087 - Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint\nCVE ID : CVE-2026-63087\n \n Published : July 16, 2026, 5:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerab...", "creation_timestamp": "2026-07-16T19:09:18.701284Z"}]}