{"vulnerability": "cve-2026-85656", "sightings": [{"uuid": "61e87a93-1a75-4ef1-8fe0-ad2dd2c6b316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ifbl5q7b7q2ic", "content": "CVE-2026-85656 - OS command injection in Amazon log4j-cve-2021-44228-hotpatch\nCVE ID : CVE-2026-85656\n \n Published : Sept. 4, 2026, 6:18 p.m. | 19\u00a0minutes ago\n \n Description : An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3...", "creation_timestamp": "2026-09-04T19:02:51.556150Z"}, {"uuid": "523421fa-0b1e-4a9b-baef-6661508331a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mupxnms6ju2v", "content": "\ud83d\udfe0 CVE-2026-85656 - High (7.8)\n\nAn OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85656/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T22:00:59.045265Z"}, {"uuid": "d42e6044-d02e-4812-b08a-458ca8dd8b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muxz7clbx627", "content": "CVE-2026-85656: OS command injection in Amazon Linux's log4j hotpatch package (<1.3-9). Local user can execute arbitrary commands as root via crafted Java process path with newlines. CVSS 7.8. Unpatched! If you rely on this hotpatch, isolate and monitor systems immediately. Detai", "creation_timestamp": "2026-09-08T02:50:03.723956Z"}, {"uuid": "ef71836b-adca-4e4d-a851-5af1c633980b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85656", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117233143190436143", "content": "CVE-2026-85656: OS command injection in Amazon Linux's log4j hotpatch package (<1.3-9). Local user can execute arbitrary commands as root via crafted Java process path with newlines. CVSS 7.8. Unpatched! If you rely on this hotpatch, isolate and monitor systems immediately. Detai", "creation_timestamp": "2026-09-08T02:50:03.951853Z"}]}