<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-18T03:48:30.572387+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fc948811-a856-4fc5-bc50-ca3ab978417f/export</id>
    <title>fc948811-a856-4fc5-bc50-ca3ab978417f</title>
    <updated>2026-09-18T03:48:30.593182+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fc948811-a856-4fc5-bc50-ca3ab978417f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92953", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:22.010778Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fc948811-a856-4fc5-bc50-ca3ab978417f/export"/>
    <published>2026-09-17T18:34:22.010778+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4ac61f05-23a0-4b86-9e90-a1bed8cfefa4/export</id>
    <title>4ac61f05-23a0-4b86-9e90-a1bed8cfefa4</title>
    <updated>2026-09-18T03:48:30.594475+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4ac61f05-23a0-4b86-9e90-a1bed8cfefa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92953", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq3rw6o4i22", "content": "CVE-2026-92953 - vm2\nVersions of the vm2 sandbox from 3.11.0 up to 3.11.7 do not stop code running inside the sandbox from changing core JavaScript objects that control binary data handling. This means an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:40:08.292148Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4ac61f05-23a0-4b86-9e90-a1bed8cfefa4/export"/>
    <published>2026-09-17T16:40:08.292148+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/477afe17-484d-4300-b627-11ad331b7e09/export</id>
    <title>477afe17-484d-4300-b627-11ad331b7e09</title>
    <updated>2026-09-18T03:48:30.594569+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "477afe17-484d-4300-b627-11ad331b7e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92953", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq24d43sr25", "content": "\ud83d\udea8 CVE-2026-92953 \u2014 CVSS 9.3 CRITICAL\n\nvm2 versions from 3.11.0 before 3.11.8 fail to protect host TypedArray and ArrayBuffer prototypes from sand...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92953\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:10:10.216864Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/477afe17-484d-4300-b627-11ad331b7e09/export"/>
    <published>2026-09-17T16:10:10.216864+00:00</published>
  </entry>
</feed>
