{"vulnerability": "CVE-2026-92940", "sightings": [{"uuid": "0ce9bf41-c5a1-4b44-b01a-b9ee0ee2e3bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92940", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq227333b2j", "content": "\ud83d\udea8 CVE-2026-92940 \u2014 CVSS 10 CRITICAL\n\nvm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to sandboxed code when ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92940\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:08:58.682477Z"}, {"uuid": "eeb3d47e-b427-4e58-9d03-396f8c97450e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92940", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq246uklt24", "content": "CVE-2026-92940 - vm2\nVersions 3.11.3 through 3.11.6 of the vm2 tool let code running in an isolated environment see the real HTTPS connections the host makes. This can allow that code to capture\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:10:05.468885Z"}, {"uuid": "bff87bc7-2b1e-4349-9438-1a396eeb098d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92940", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.532360Z"}]}