{"uuid": "ef71836b-adca-4e4d-a851-5af1c633980b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117233143190436143", "content": "CVE-2026-85656: OS command injection in Amazon Linux's log4j hotpatch package (<1.3-9). Local user can execute arbitrary commands as root via crafted Java process path with newlines. CVSS 7.8. Unpatched! If you rely on this hotpatch, isolate and monitor systems immediately. Detai", "creation_timestamp": "2026-09-08T02:50:03.951853Z"}