{"vulnerability": "cve-2026-92946", "sightings": [{"uuid": "c0a29711-dd52-426d-aeb7-75151451ae79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92946", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq22ywnjz2y", "content": "\ud83d\udea8 CVE-2026-92946 \u2014 CVSS 10 CRITICAL\n\nvm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92946\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:09:25.734247Z"}, {"uuid": "e6fe741f-7554-485f-adc1-5965a5198c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92946", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq37zokqz2f", "content": "CVE-2026-92946 - vm2\nThe vm2 sandbox library for Node.js can let attackers run commands on the server if the \"require.external\" option is turned on without proper restrictions. This could let malicious code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:30:08.245511Z"}, {"uuid": "6f472c95-9e72-48f9-b6f5-8cc0f3dacea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92946", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.706960Z"}]}