{"uuid": "d7b9a421-fa72-48ba-9001-81b81750a48e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85520", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwnrqvahbj2w", "content": "CRITICAL vuln in MyPresta Google Merchant Center Feed (v1.9.1 \u2013 2.3.8): unauthenticated RCE via arbitrary file write. Patch to 2.3.9 ASAP! https://radar.offseq.com/threat/cve-2026-85520-cwe-73-external-control-of-file-name-or-path-in-mypresta-google-merchant-center-feed-ec39d5f257163d36 #OffSeq #...", "creation_timestamp": "2026-09-29T12:00:29.784253Z"}