{"vulnerability": "CVE-2026-8565", "sightings": [{"uuid": "87c6fc53-4568-4dc6-944c-e4c895e88453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8565", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "f41f0888-470c-4432-8ba8-58f2eef61aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8565", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}, {"uuid": "61e87a93-1a75-4ef1-8fe0-ad2dd2c6b316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ifbl5q7b7q2ic", "content": "CVE-2026-85656 - OS command injection in Amazon log4j-cve-2021-44228-hotpatch\nCVE ID : CVE-2026-85656\n \n Published : Sept. 4, 2026, 6:18 p.m. | 19\u00a0minutes ago\n \n Description : An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3...", "creation_timestamp": "2026-09-04T19:02:51.556150Z"}, {"uuid": "523421fa-0b1e-4a9b-baef-6661508331a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mupxnms6ju2v", "content": "\ud83d\udfe0 CVE-2026-85656 - High (7.8)\n\nAn OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85656/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T22:00:59.045265Z"}, {"uuid": "61b5b52a-5020-4d5c-9ab9-0ba6fd33cc4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85654", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mupxnu7m6m2m", "content": "\ud83d\udfe0 CVE-2026-85654 - High (7.8)\n\nImproper neutralization of special elements used in a template engine in the CDK generator in Ama...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85654/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T22:01:06.123513Z"}, {"uuid": "d42e6044-d02e-4812-b08a-458ca8dd8b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxz7clbx627", "content": "CVE-2026-85656: OS command injection in Amazon Linux's log4j hotpatch package (<1.3-9). Local user can execute arbitrary commands as root via crafted Java process path with newlines. CVSS 7.8. Unpatched! If you rely on this hotpatch, isolate and monitor systems immediately. Detai", "creation_timestamp": "2026-09-08T02:50:03.723956Z"}, {"uuid": "ef71836b-adca-4e4d-a851-5af1c633980b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117233143190436143", "content": "CVE-2026-85656: OS command injection in Amazon Linux's log4j hotpatch package (<1.3-9). Local user can execute arbitrary commands as root via crafted Java process path with newlines. CVSS 7.8. Unpatched! If you rely on this hotpatch, isolate and monitor systems immediately. Detai", "creation_timestamp": "2026-09-08T02:50:03.951853Z"}, {"uuid": "598fc175-664e-4f1d-ad9c-0faec936dd2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85654", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muznq5uzq42v", "content": "CVE-2026-85654: Amazon awslabs.dynamodb-mcp-server < 2.1.6 has an RCE risk via template injection in the CDK generator. Crafted table/index/attribute names in a model file can execute arbitrary code during deployment. CVSS 7.8. No patch yet. Isolate deploy hosts and avoid untrust", "creation_timestamp": "2026-09-08T18:30:03.635212Z"}, {"uuid": "8e1cf0d3-6d16-4e7b-909f-e6ecaa242aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85654", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117236839418321182", "content": "CVE-2026-85654: Amazon awslabs.dynamodb-mcp-server < 2.1.6 has an RCE risk via template injection in the CDK generator. Crafted table/index/attribute names in a model file can execute arbitrary code during deployment. CVSS 7.8. No patch yet. Isolate deploy hosts and avoid untrust", "creation_timestamp": "2026-09-08T18:30:05.970068Z"}, {"uuid": "420c0989-d27e-47f3-a6cc-0aa94ce05bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85658", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvud4pn4lf2p", "content": "\ud83d\udfe0 CVE-2026-85658 - High (8.1)\n\nThe Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restric...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85658/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T09:02:07.166401Z"}, {"uuid": "61122665-97ed-469b-893c-f68fe204f908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85653", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117369982252954029", "content": "CVE-2026-85653: Stored XSS in Contextual Related Posts WordPress plugin, all versions through 4.4.1. Author-level users can inject scripts. CVSS 6.4. No patch yet - disable the plugin until one ships. https://www.valtersit.com/cve/CVE-2026-85653/ #CVE #WordPress #infosec", "creation_timestamp": "2026-10-02T06:50:05.212446Z"}, {"uuid": "9ed8e860-b0ba-4fa8-92b9-16538b109202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85653", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwusehwgtn2m", "content": "CVE-2026-85653: Stored XSS in Contextual Related Posts WordPress plugin, all versions through 4.4.1. Author-level users can inject scripts. CVSS 6.4. No patch yet - disable the plugin until one ships. https://www.valtersit.com/cve/CVE-2026-85653/ #CVE #WordPress #infosec", "creation_timestamp": "2026-10-02T07:00:04.061971Z"}, {"uuid": "43bdac4d-5f0b-4a2b-a696-2e8554814528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85650", "type": "seen", "source": "https://gist.github.com/alon710/4a847ee61554d83a142783612cd3e96f", "content": "# GHSA-XXV7-2VV3-H682: CVE-2026-85650: Server-Side Request Forgery in Trigger.dev Webhook Alert Channel Delivery\n\n> **CVSS Score:** 7.7\n> **Published:** 2026-10-02\n> **Full Report:** https://cvereports.com/reports/GHSA-XXV7-2VV3-H682\n\n## Summary\nA critical Server-Side Request Forgery (SSRF) vulnerability in Trigger.dev prior to version 4.5.2 allows authenticated organization members to configure webhook alert channels with unvalidated target URLs. This can lead to internal network scanning and cloud metadata extraction.\n\n## TL;DR\nUnvalidated webhook URLs in Trigger.dev allow authenticated users to perform server-side requests against internal services and cloud metadata endpoints.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918 (Server-Side Request Forgery)\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Base Score**: 7.7 (High)\n- **EPSS Score**: 0.00348\n- **Exploit Status**: PoC (Proof of Concept Available)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Trigger.dev Control Plane Webapp\n- Trigger.dev Self-Hosted Web Application\n- **trigger.dev**: < 4.5.2 (Fixed in: `4.5.2`)\n\n## Mitigation\n\n- Implement multi-layered input schema validation to prevent local IP entry.\n- Execute connection-bound socket DNS validation to prevent DNS rebinding.\n- Deploy step-by-step redirect validation limited to 5 hops.\n- Enforce network egress filtering to segment internal services.\n\n**Remediation Steps:**\n1. Upgrade Trigger.dev self-hosted instances to version 4.5.2 or above.\n2. Verify active database entries in 'ProjectAlert' for non-public IP configurations.\n3. Configure firewalls to block outbound traffic from the Trigger.dev control plane to the private network range.\n4. Enforce IMDSv2 with a hop limit of 1 in cloud hosting environments.\n\n## References\n\n- [GitHub Advisory GHSA-xxv7-2vv3-h682](https://github.com/triggerdotdev/trigger.dev/security/advisories/GHSA-xxv7-2vv3-h682)\n- [Official Patch Commit](https://github.com/triggerdotdev/trigger.dev/commit/34b1a181c2a1d33a53ebab88f84b05f81fea4254)\n- [Trigger.dev Release v4.5.2](https://github.com/triggerdotdev/trigger.dev/releases/tag/v4.5.2)\n- [Authoritative CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-85650)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-XXV7-2VV3-H682) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-02T20:30:31.000000Z"}]}