{"vulnerability": "CVE-2026-85885", "sightings": [{"uuid": "17d8e400-0b85-463b-82c6-790865e84d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85885", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvquuy6rqj2b", "content": "\ud83d\udea8 CVE-2026-85885 \u2014 CVSS 9.9 CRITICAL\n\nImproper neutralization of special elements used in a command ('command injection') in M365 Copilot allows ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85885\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T00:09:14.593359Z"}, {"uuid": "ea4bc47d-c68d-4a7a-a7a7-75407287d9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85885", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr4qsranr25", "content": "CVE-2026-85885 - microsoft 365 copilot\nA flaw in Microsoft 365 Copilot lets someone with valid access run special commands that increase their permissions across the network. This could allow the attacker to view\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:30:04.993121Z"}]}