{"vulnerability": "CVE-2026-105985", "sightings": [{"uuid": "73b16881-f87f-4f57-b6b2-a13a003f57a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105985", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5seofnoue4dga", "content": "CVE-2026-105985 - Authenticated RCE via render-components Entry Type overrides\nCVE ID : CVE-2026-105985\n \n Published : Oct. 6, 2026, 10:23 a.m. | 50\u00a0minutes ago\n \n Description : Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Pa...", "creation_timestamp": "2026-10-06T11:33:23.255645Z"}, {"uuid": "a3f84336-c4e9-48cb-8c1a-5d8038b6383f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105985", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdjygi2gb2n", "content": "CVE-2026-105985 - cms\nIf someone can log into the Craft CMS control panel, they can send specially crafted requests that cause the system to execute any command on the web server. This happens because the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cms #craftcms #CVE #infosec", "creation_timestamp": "2026-10-08T03:40:05.693949Z"}]}