https://vulnerability.circl.lu/sightings/feed 2026-09-18T03:48:33.853579+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6f472c95-9e72-48f9-b6f5-8cc0f3dacea6/export 2026-09-18T03:48:33.879141+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6f472c95-9e72-48f9-b6f5-8cc0f3dacea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92946", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.706960Z"} 2026-09-17T18:34:21.706960+00:00 https://vulnerability.circl.lu/sighting/e6fe741f-7554-485f-adc1-5965a5198c98/export 2026-09-18T03:48:33.880951+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e6fe741f-7554-485f-adc1-5965a5198c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92946", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq37zokqz2f", "content": "CVE-2026-92946 - vm2\nThe vm2 sandbox library for Node.js can let attackers run commands on the server if the \"require.external\" option is turned on without proper restrictions. This could let malicious code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:30:08.245511Z"} 2026-09-17T16:30:08.245511+00:00 https://vulnerability.circl.lu/sighting/c0a29711-dd52-426d-aeb7-75151451ae79/export 2026-09-18T03:48:33.881101+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c0a29711-dd52-426d-aeb7-75151451ae79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92946", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq22ywnjz2y", "content": "\ud83d\udea8 CVE-2026-92946 \u2014 CVSS 10 CRITICAL\n\nvm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92946\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:09:25.734247Z"} 2026-09-17T16:09:25.734247+00:00