Skip to content

CVE-2026-16498

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
August 27, 2026
Last Seen
August 28, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

On July 12, 2026, researcher cccccccti disclosed a Server-Side Request Forgery (SSRF) vulnerability in the raw_sentry_api component of ddfourtwo/sentry-selfhosted-mcp, tracked as CVE-2026-81421. This vulnerability allows attackers to force Axios to call arbitrary endpoints, with a public exploit alr...

Public Exploits

Checking GitHub for proof-of-concept code…