https://vulnerability.circl.lu/sightings/feed 2026-09-18T02:27:15.803327+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/34c2c315-0464-4e42-bfca-f075e53153bf/export 2026-09-18T02:27:15.826499+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "34c2c315-0464-4e42-bfca-f075e53153bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92941", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.593377Z"} 2026-09-17T18:34:21.593377+00:00 https://vulnerability.circl.lu/sighting/3281c247-3ac1-4014-b869-7f1eeb1f0e6c/export 2026-09-18T02:27:15.828921+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3281c247-3ac1-4014-b869-7f1eeb1f0e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92941", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq24dqwp52p", "content": "CVE-2026-92941 - vm2\nVersions of vm2 between 3.11.3 and 3.11.6 allow code running inside the sandbox to modify the Node.js TLS settings for the whole host. This lets an attacker replace the list of trusted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:10:10.931025Z"} 2026-09-17T16:10:10.931025+00:00 https://vulnerability.circl.lu/sighting/07ee1da7-c0fe-4671-b16b-14afd0c99abe/export 2026-09-18T02:27:15.829061+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "07ee1da7-c0fe-4671-b16b-14afd0c99abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92941", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq22hlddl2r", "content": "\ud83d\udea8 CVE-2026-92941 \u2014 CVSS 10 CRITICAL\n\nvm2 versions from 3.11.3 before 3.11.7 expose the host tls module to NodeVM sandbox code, allowing attacker...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92941\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:09:08.632920Z"} 2026-09-17T16:09:08.632920+00:00