<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-12T19:31:37.847844+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ef71836b-adca-4e4d-a851-5af1c633980b/export</id>
    <title>ef71836b-adca-4e4d-a851-5af1c633980b</title>
    <updated>2026-09-12T19:31:37.875203+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ef71836b-adca-4e4d-a851-5af1c633980b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117233143190436143", "content": "CVE-2026-85656: OS command injection in Amazon Linux's log4j hotpatch package (&amp;lt;1.3-9). Local user can execute arbitrary commands as root via crafted Java process path with newlines. CVSS 7.8. Unpatched! If you rely on this hotpatch, isolate and monitor systems immediately. Detai", "creation_timestamp": "2026-09-08T02:50:03.951853Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ef71836b-adca-4e4d-a851-5af1c633980b/export"/>
    <published>2026-09-08T02:50:03.951853+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d42e6044-d02e-4812-b08a-458ca8dd8b83/export</id>
    <title>d42e6044-d02e-4812-b08a-458ca8dd8b83</title>
    <updated>2026-09-12T19:31:37.878085+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d42e6044-d02e-4812-b08a-458ca8dd8b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxz7clbx627", "content": "CVE-2026-85656: OS command injection in Amazon Linux's log4j hotpatch package (&amp;lt;1.3-9). Local user can execute arbitrary commands as root via crafted Java process path with newlines. CVSS 7.8. Unpatched! If you rely on this hotpatch, isolate and monitor systems immediately. Detai", "creation_timestamp": "2026-09-08T02:50:03.723956Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d42e6044-d02e-4812-b08a-458ca8dd8b83/export"/>
    <published>2026-09-08T02:50:03.723956+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/523421fa-0b1e-4a9b-baef-6661508331a5/export</id>
    <title>523421fa-0b1e-4a9b-baef-6661508331a5</title>
    <updated>2026-09-12T19:31:37.878412+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "523421fa-0b1e-4a9b-baef-6661508331a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mupxnms6ju2v", "content": "\ud83d\udfe0 CVE-2026-85656 - High (7.8)\n\nAn OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85656/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T22:00:59.045265Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/523421fa-0b1e-4a9b-baef-6661508331a5/export"/>
    <published>2026-09-04T22:00:59.045265+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/61e87a93-1a75-4ef1-8fe0-ad2dd2c6b316/export</id>
    <title>61e87a93-1a75-4ef1-8fe0-ad2dd2c6b316</title>
    <updated>2026-09-12T19:31:37.878691+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "61e87a93-1a75-4ef1-8fe0-ad2dd2c6b316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ifbl5q7b7q2ic", "content": "CVE-2026-85656 - OS command injection in Amazon log4j-cve-2021-44228-hotpatch\nCVE ID : CVE-2026-85656\n \n Published : Sept. 4, 2026, 6:18 p.m. | 19\u00a0minutes ago\n \n Description : An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3...", "creation_timestamp": "2026-09-04T19:02:51.556150Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/61e87a93-1a75-4ef1-8fe0-ad2dd2c6b316/export"/>
    <published>2026-09-04T19:02:51.556150+00:00</published>
  </entry>
</feed>
