{"vulnerability": "cve-2026-93605", "sightings": [{"uuid": "56d8654a-95cd-4107-8a54-c93d72fc4547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117292483452078658", "content": "RE: https://infosec.exchange/@cR0w/117287817060203283\nBut wait, there's more perfect 10s!\ud83e\udd73 https://www.cve.org/CVERecord?id=CVE-2026-93603\nhttps://www.cve.org/CVERecord?id=CVE-2026-93605\nhttps://www.cve.org/CVERecord?id=CVE-2026-93606", "creation_timestamp": "2026-09-18T14:21:04.748942Z"}, {"uuid": "855243fd-97ee-4342-b9d6-4776c7178401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsgyx7y7j2r", "content": "\ud83d\udd34 CVE-2026-93605 - Critical (10)\n\nvm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUIL...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93605/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T15:06:15.912999Z"}, {"uuid": "0226ffa3-2b9b-430e-9457-ed7b7815a521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvskgr2dny2r", "content": "\ud83d\udea8 CVE-2026-93605 \u2014 CVSS 10 CRITICAL\n\nvm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denyl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93605\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T16:07:39.575854Z"}, {"uuid": "3f16b14c-ca0e-4578-9991-dba3a5b50b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsz44wanv2j", "content": "CVE-2026-93605 - vm2\nVersions of the vm2 NodeVM library before 3.12.1 let a malicious piece of code access the system's command tool and run any command it wants. This can happen when the sandbox is set to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-18T20:30:08.865426Z"}]}