<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 19 Sep 2026 06:19:00 +0000</lastBuildDate>
    <item>
      <title>3f16b14c-ca0e-4578-9991-dba3a5b50b6d</title>
      <link>https://vulnerability.circl.lu/sighting/3f16b14c-ca0e-4578-9991-dba3a5b50b6d/export</link>
      <description>{"uuid": "3f16b14c-ca0e-4578-9991-dba3a5b50b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsz44wanv2j", "content": "CVE-2026-93605 - vm2\nVersions of the vm2 NodeVM library before 3.12.1 let a malicious piece of code access the system's command tool and run any command it wants. This can happen when the sandbox is set to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-18T20:30:08.865426Z"}</description>
      <content:encoded>{"uuid": "3f16b14c-ca0e-4578-9991-dba3a5b50b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsz44wanv2j", "content": "CVE-2026-93605 - vm2\nVersions of the vm2 NodeVM library before 3.12.1 let a malicious piece of code access the system's command tool and run any command it wants. This can happen when the sandbox is set to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-18T20:30:08.865426Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3f16b14c-ca0e-4578-9991-dba3a5b50b6d/export</guid>
      <pubDate>Fri, 18 Sep 2026 20:30:08 +0000</pubDate>
    </item>
    <item>
      <title>0226ffa3-2b9b-430e-9457-ed7b7815a521</title>
      <link>https://vulnerability.circl.lu/sighting/0226ffa3-2b9b-430e-9457-ed7b7815a521/export</link>
      <description>{"uuid": "0226ffa3-2b9b-430e-9457-ed7b7815a521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvskgr2dny2r", "content": "\ud83d\udea8 CVE-2026-93605 \u2014 CVSS 10 CRITICAL\n\nvm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denyl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93605\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T16:07:39.575854Z"}</description>
      <content:encoded>{"uuid": "0226ffa3-2b9b-430e-9457-ed7b7815a521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvskgr2dny2r", "content": "\ud83d\udea8 CVE-2026-93605 \u2014 CVSS 10 CRITICAL\n\nvm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denyl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93605\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T16:07:39.575854Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0226ffa3-2b9b-430e-9457-ed7b7815a521/export</guid>
      <pubDate>Fri, 18 Sep 2026 16:07:39 +0000</pubDate>
    </item>
    <item>
      <title>855243fd-97ee-4342-b9d6-4776c7178401</title>
      <link>https://vulnerability.circl.lu/sighting/855243fd-97ee-4342-b9d6-4776c7178401/export</link>
      <description>{"uuid": "855243fd-97ee-4342-b9d6-4776c7178401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsgyx7y7j2r", "content": "\ud83d\udd34 CVE-2026-93605 - Critical (10)\n\nvm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUIL...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93605/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T15:06:15.912999Z"}</description>
      <content:encoded>{"uuid": "855243fd-97ee-4342-b9d6-4776c7178401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsgyx7y7j2r", "content": "\ud83d\udd34 CVE-2026-93605 - Critical (10)\n\nvm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUIL...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93605/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T15:06:15.912999Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/855243fd-97ee-4342-b9d6-4776c7178401/export</guid>
      <pubDate>Fri, 18 Sep 2026 15:06:15 +0000</pubDate>
    </item>
    <item>
      <title>56d8654a-95cd-4107-8a54-c93d72fc4547</title>
      <link>https://vulnerability.circl.lu/sighting/56d8654a-95cd-4107-8a54-c93d72fc4547/export</link>
      <description>{"uuid": "56d8654a-95cd-4107-8a54-c93d72fc4547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117292483452078658", "content": "RE: https://infosec.exchange/@cR0w/117287817060203283\nBut wait, there's more perfect 10s!\ud83e\udd73 https://www.cve.org/CVERecord?id=CVE-2026-93603\nhttps://www.cve.org/CVERecord?id=CVE-2026-93605\nhttps://www.cve.org/CVERecord?id=CVE-2026-93606", "creation_timestamp": "2026-09-18T14:21:04.748942Z"}</description>
      <content:encoded>{"uuid": "56d8654a-95cd-4107-8a54-c93d72fc4547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117292483452078658", "content": "RE: https://infosec.exchange/@cR0w/117287817060203283\nBut wait, there's more perfect 10s!\ud83e\udd73 https://www.cve.org/CVERecord?id=CVE-2026-93603\nhttps://www.cve.org/CVERecord?id=CVE-2026-93605\nhttps://www.cve.org/CVERecord?id=CVE-2026-93606", "creation_timestamp": "2026-09-18T14:21:04.748942Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/56d8654a-95cd-4107-8a54-c93d72fc4547/export</guid>
      <pubDate>Fri, 18 Sep 2026 14:21:04 +0000</pubDate>
    </item>
  </channel>
</rss>
