{"metadata": {"vulnerability": "CVE-2026-100721", "count": 48, "kinds": {"milestone": 7, "sighting": 11, "kev": 0, "other": 30}}, "data": [{"timestamp": "2026-05-26T05:00:07.813Z", "date_only": false, "value": "2026-05-26T05:00:07.813000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-26T07:00:51.002Z", "date_only": false, "value": "2026-05-26T07:00:51.002449+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-09-03T18:54:25.878Z", "date_only": false, "value": "2026-09-03T18:54:25.878000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-09-03T19:02:24.629Z", "date_only": false, "value": "2026-09-03T19:02:24.629508+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100721", "field": "containers.cna.datePublic"}, {"timestamp": "2026-09-10T19:56:25.335Z", "date_only": false, "value": "2026-09-10T19:56:25.335000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-09-10T20:01:29.938Z", "date_only": false, "value": "2026-09-10T20:01:29.938454+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-09-11T11:24:55.150Z", "date_only": false, "value": "2026-09-11T11:24:55.150000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-09-11T11:40:59Z", "date_only": false, "value": "2026-09-11T11:40:59.000487+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-09-26T02:40:56.226Z", "date_only": false, "value": "2026-09-26T02:40:56.226Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-100721", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-27T01:28:28.596Z", "date_only": false, "value": "2026-09-27T01:28:28.596Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-100721", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-27T01:28:28.596Z", "date_only": false, "value": "2026-09-27T01:28:28.596000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-09-27T01:28:28.596Z", "date_only": false, "value": "2026-09-27T01:28:28.596Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-100721", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-27T01:50:52.875Z", "date_only": false, "value": "2026-09-27T01:50:52.875418+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-09-27T02:17:17Z", "date_only": false, "value": "2026-09-27T02:17:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C9WR-QM7P-P6VC", "record": "GHSA-C9WR-QM7P-P6VC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-27T02:17:17.547Z", "date_only": false, "value": "2026-09-27T02:17:17.547", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100721", "record": "FKIE_CVE-2026-100721", "field": "published"}, {"timestamp": "2026-09-27T02:20:04.717Z", "date_only": false, "value": "2026-09-27T02:20:04.717688Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhqf7qodh2i", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "54a88dac-0c0d-4bca-ab4d-11a132c29ca4", "content": "CVE-2026-100721 - vm2\nThe vm2 library version earlier than 3.12.2 can be tricked into loading code it should block, allowing code running inside a sandbox to execute on the host system. This happens when a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhqf7qodh2i"}, {"timestamp": "2026-09-27T03:31:03Z", "date_only": false, "value": "2026-09-27T03:31:03Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C9WR-QM7P-P6VC", "record": "GHSA-C9WR-QM7P-P6VC", "field": "published"}, {"timestamp": "2026-09-27T04:07:06.183Z", "date_only": false, "value": "2026-09-27T04:07:06.183675Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwhwellgf726", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "8664ffa5-99ac-4464-91ee-2feecdae5d30", "content": "\ud83d\udea8 CVE-2026-100721 \u2014 CVSS 9.5 CRITICAL\n\nvm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100721\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwhwellgf726"}, {"timestamp": "2026-09-27T06:00:24.304Z", "date_only": false, "value": "2026-09-27T06:00:24.304087Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117341475539176060", "record": "cve-2026-100721", "field": "creation_timestamp", "uuid": "5bb7180f-8dc7-4a2b-b308-3663268d3bde", "content": "CVE-2026-100721: CRITICAL auth bypass in vm2 <3.12.2's NodeVM external-module resolver. Sandbox escape & arbitrary code exec possible. Upgrade to 3.12.2+ ASAP. https://radar.offseq.com/threat/vm2-before-3122-contains-an-authorization-bypass-in-the-nodevm-external-module-resolver-cve-2026-100721-5c70167d00dbbf82 #OffSeq #CVE2026100721 #vm2 #infosec", "url": "https://infosec.exchange/users/offseq/statuses/117341475539176060"}, {"timestamp": "2026-09-27T06:00:26.502Z", "date_only": false, "value": "2026-09-27T06:00:26.502810Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwi4pagjcv2q", "record": "cve-2026-100721", "field": "creation_timestamp", "uuid": "4528e429-d4ff-41bc-80ed-ddfb79e3b574", "content": "vm2 <3.12.2 suffers a CRITICAL authorization bypass in NodeVM external-module resolver. Sandbox escape & code execution risk. Upgrade to 3.12.2+ immediately. https://radar.offseq.com/threat/vm2-before-3122-contains-an-authorization-bypass-in-the-nodevm-external-module-resolver-cve-2026-100721-5c7...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwi4pagjcv2q"}, {"timestamp": "2026-09-28T01:01:18.368Z", "date_only": false, "value": "2026-09-28T01:01:18.368358Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk4haotdp27", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "fe6019ba-bded-4969-a6bf-30f0a47e928d", "content": "\ud83d\udd34 CVE-2026-100721 - Critical (9)\n\nvm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100721/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwk4haotdp27"}, {"timestamp": "2026-09-28T10:00:09Z", "date_only": false, "value": "2026-09-28T10:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103628", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "a80e91ca-cecc-4f46-ad39-05267c6525d0", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-100721\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 09:46:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-100721 PoC: vm2 <3.12.2 NodeVM external allowlist bypass \u2192 sandbox escape / host RCE. Local Node lab (evil-left-pad), remote sandbox API mass exploit, colorful CLI. PoCbit \u2014 https://pocbit.org/pocs/cve-2026-100721\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103628"}, {"timestamp": "2026-09-28T11:00:13Z", "date_only": false, "value": "2026-09-28T11:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/86UKc-a8dyoVcD7Y4niyS9OxM-BpnvAATArPBShCYu67BME", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "255ac885-4ba2-4a54-89b9-9a65128b681b"}, {"timestamp": "2026-09-28T11:00:13Z", "date_only": false, "value": "2026-09-28T11:00:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/86UKc-a8dyoVcD7Y4niyS9OxM-BpnvAATArPBShCYu67BME", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "ef4998aa-9c78-43cb-a157-bb3938682fcd"}, {"timestamp": "2026-09-28T16:50:50.404Z", "date_only": false, "value": "2026-09-28T16:50:50.404410Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-100721", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-28T16:50:50.404Z", "date_only": false, "value": "2026-09-28T16:50:50.404410Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100721", "record": "FKIE_CVE-2026-100721", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-28T16:51:10.611Z", "date_only": false, "value": "2026-09-28T16:51:10.611Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-100721", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-28T16:51:10.611Z", "date_only": false, "value": "2026-09-28T16:51:10.611Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-100721", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-28T17:17:46.057Z", "date_only": false, "value": "2026-09-28T17:17:46.057", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-100721", "record": "FKIE_CVE-2026-100721", "field": "lastModified"}, {"timestamp": "2026-09-28T21:00:04Z", "date_only": false, "value": "2026-09-28T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/YMUJMtIkSS3VWfyhuvlmbqaYIB_anho54ywns4AAHnWUn5M", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "c191452a-9cb9-4340-942c-6671d58e9bc5"}, {"timestamp": "2026-09-28T21:00:04Z", "date_only": false, "value": "2026-09-28T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/YMUJMtIkSS3VWfyhuvlmbqaYIB_anho54ywns4AAHnWUn5M", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "2f2cc5fa-637a-4cee-8423-cbb4d6446d39"}, {"timestamp": "2026-09-30T16:17:39.368Z", "date_only": false, "value": "2026-09-30T16:17:39.368000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-09-30T16:41:50.203Z", "date_only": false, "value": "2026-09-30T16:41:50.203373+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-05T23:23:51Z", "date_only": false, "value": "2026-10-05T23:23:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C9WR-QM7P-P6VC", "record": "GHSA-C9WR-QM7P-P6VC", "field": "modified"}, {"timestamp": "2026-10-05T23:23:51Z", "date_only": false, "value": "2026-10-05T23:23:51Z", "kind": "other", "label": "Withdrawn", "source": "github \u00b7 GHSA-C9WR-QM7P-P6VC", "record": "GHSA-C9WR-QM7P-P6VC", "field": "withdrawn"}, {"timestamp": "2026-10-05T23:24:29Z", "date_only": false, "value": "2026-10-05T23:24:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5H3F-Q97H-CCVC", "record": "GHSA-5H3F-Q97H-CCVC", "field": "published"}, {"timestamp": "2026-10-05T23:24:29Z", "date_only": false, "value": "2026-10-05T23:24:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/advisories/GHSA-5h3f-q97h-ccvc", "record": "CVE-2026-100721", "field": "creation_timestamp", "uuid": "20e77fbb-3cbb-47e5-8747-7f8af784a1ff", "url": "https://github.com/advisories/GHSA-5h3f-q97h-ccvc"}, {"timestamp": "2026-10-05T23:24:29Z", "date_only": false, "value": "2026-10-05T23:24:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5H3F-Q97H-CCVC", "record": "GHSA-5H3F-Q97H-CCVC", "field": "modified"}, {"timestamp": "2026-10-09T11:32:43Z", "date_only": false, "value": "2026-10-09T11:32:43Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-CN31177", "record": "CLEANSTART-2026-CN31177", "field": "modified"}, {"timestamp": "2026-10-10T00:47:51.355Z", "date_only": false, "value": "2026-10-10T00:47:51.355379Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-CN31177", "record": "CLEANSTART-2026-CN31177", "field": "published"}, {"timestamp": "2026-10-22T12:19:50Z", "date_only": false, "value": "2026-10-22T12:19:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-22T12:19:50Z", "date_only": false, "value": "2026-10-22T12:19:50+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-22T12:19:50Z", "date_only": false, "value": "2026-10-22T12:19:50+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-22T12:19:53Z", "date_only": false, "value": "2026-10-22T12:19:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-26T04:45:58Z", "date_only": false, "value": "2026-10-26T04:45:58+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-26T04:45:58Z", "date_only": false, "value": "2026-10-26T04:45:58+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T04:45:58Z", "date_only": false, "value": "2026-10-26T04:45:58+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:88200", "record": "RHSA-2026:88200", "field": "document.tracking.current_release_date"}]}