{"vulnerability": "cve-2026-8565", "sightings": [{"uuid": "87c6fc53-4568-4dc6-944c-e4c895e88453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8565", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "f41f0888-470c-4432-8ba8-58f2eef61aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8565", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}, {"uuid": "61e87a93-1a75-4ef1-8fe0-ad2dd2c6b316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ifbl5q7b7q2ic", "content": "CVE-2026-85656 - OS command injection in Amazon log4j-cve-2021-44228-hotpatch\nCVE ID : CVE-2026-85656\n \n Published : Sept. 4, 2026, 6:18 p.m. | 19\u00a0minutes ago\n \n Description : An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3...", "creation_timestamp": "2026-09-04T19:02:51.556150Z"}, {"uuid": "523421fa-0b1e-4a9b-baef-6661508331a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mupxnms6ju2v", "content": "\ud83d\udfe0 CVE-2026-85656 - High (7.8)\n\nAn OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85656/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T22:00:59.045265Z"}, {"uuid": "61b5b52a-5020-4d5c-9ab9-0ba6fd33cc4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85654", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mupxnu7m6m2m", "content": "\ud83d\udfe0 CVE-2026-85654 - High (7.8)\n\nImproper neutralization of special elements used in a template engine in the CDK generator in Ama...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85654/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T22:01:06.123513Z"}, {"uuid": "d42e6044-d02e-4812-b08a-458ca8dd8b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxz7clbx627", "content": "CVE-2026-85656: OS command injection in Amazon Linux's log4j hotpatch package (<1.3-9). Local user can execute arbitrary commands as root via crafted Java process path with newlines. CVSS 7.8. Unpatched! If you rely on this hotpatch, isolate and monitor systems immediately. Detai", "creation_timestamp": "2026-09-08T02:50:03.723956Z"}, {"uuid": "ef71836b-adca-4e4d-a851-5af1c633980b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117233143190436143", "content": "CVE-2026-85656: OS command injection in Amazon Linux's log4j hotpatch package (<1.3-9). Local user can execute arbitrary commands as root via crafted Java process path with newlines. CVSS 7.8. Unpatched! If you rely on this hotpatch, isolate and monitor systems immediately. Detai", "creation_timestamp": "2026-09-08T02:50:03.951853Z"}, {"uuid": "598fc175-664e-4f1d-ad9c-0faec936dd2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85654", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muznq5uzq42v", "content": "CVE-2026-85654: Amazon awslabs.dynamodb-mcp-server < 2.1.6 has an RCE risk via template injection in the CDK generator. Crafted table/index/attribute names in a model file can execute arbitrary code during deployment. CVSS 7.8. No patch yet. Isolate deploy hosts and avoid untrust", "creation_timestamp": "2026-09-08T18:30:03.635212Z"}, {"uuid": "8e1cf0d3-6d16-4e7b-909f-e6ecaa242aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85654", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117236839418321182", "content": "CVE-2026-85654: Amazon awslabs.dynamodb-mcp-server < 2.1.6 has an RCE risk via template injection in the CDK generator. Crafted table/index/attribute names in a model file can execute arbitrary code during deployment. CVSS 7.8. No patch yet. Isolate deploy hosts and avoid untrust", "creation_timestamp": "2026-09-08T18:30:05.970068Z"}]}