{"vulnerability": "cve-2026-85012", "sightings": [{"uuid": "9c9a09e9-cc10-4c9b-a591-24a1ec7cdd2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85012", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mun54bf6vr24", "content": "\ud83d\udfe0 CVE-2026-85012 - High (8)\n\nImproper neutralization of special elements used in an OS command (CWE-78) in the blueprint resyn...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85012/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-03T19:00:39.371235Z"}, {"uuid": "64ef33b9-4d02-4cf5-807a-4d2a9b10936d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85012", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/iofkhwgq3tae3", "content": "CVE-2026-85012 - OS command injection in the Amazon CodeCatalyst blueprints SDK\nCVE ID : CVE-2026-85012\n \n Published : Sept. 3, 2026, 6:17 p.m. | 20\u00a0minutes ago\n \n Description : Improper neutralization of special elements used in an OS command (CWE-78) in the blueprint resynth...", "creation_timestamp": "2026-09-03T19:04:33.233270Z"}, {"uuid": "8566bf29-498d-4093-96c5-caa35ccc5674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85012", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3muncbcvskb2z", "content": "CVE-2026-85012 - OS command injection in the Amazon CodeCatalyst blueprints SDK #patchmanagement", "creation_timestamp": "2026-09-03T20:32:56.985611Z"}, {"uuid": "f48394ff-ef6c-4893-be5f-7a5d6efa5ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85012", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3munryo7ble23", "content": "CVE-2026-85012 - Command Injection in AWS codecatalyst-blueprints. Arbitrary command execution via crafted .ownership-file. CVSS 8.0. Update to v0.3.156 now. #CVE #AWS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-85012/", "creation_timestamp": "2026-09-04T01:14:26.752441Z"}, {"uuid": "e98f1333-8798-492b-b18e-cf695f35cd52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85012", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117210117967392191", "content": "CVE-2026-85012 - Command Injection in AWS codecatalyst-blueprints. Arbitrary command execution via crafted .ownership-file. CVSS 8.0. Update to v0.3.156 now. #CVE #AWS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-85012/", "creation_timestamp": "2026-09-04T01:14:26.898896Z"}]}