{"uuid": "f54db4b7-b054-40fd-b147-be90ccc708f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85520", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117354215924936317", "content": "MyPresta Google Merchant Center Feed (v1.9.1 \u2013 2.3.8) hit by CRITICAL vuln (CVE-2026-85520): unauthenticated arbitrary file write via feed.php enables RCE. Update to 2.3.9 ASAP \ud83d\udee1\ufe0f https://radar.offseq.com/threat/cve-2026-85520-cwe-73-external-control-of-file-name-or-path-in-mypresta-google-merchant-center-feed-ec39d5f257163d36#OffSeq #CVE202685520 #PrestaShop #RCE", "creation_timestamp": "2026-09-29T12:00:27.087876Z"}