https://vulnerability.circl.lu/sightings/feed 2026-09-14T16:23:52.769541+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4b0beed7-b264-475f-8993-99c839cfab40/export 2026-09-14T16:23:52.795691+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4b0beed7-b264-475f-8993-99c839cfab40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90648", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvfaacghw725", "content": "WebAssembly wabt <=1.0.41 hit by HIGH severity vuln: unchecked calloc() in wasm2c can enable sandbox escape & code exec on 32-bit or memory-restricted hosts. Mitigate memory pressure, monitor advisories. https://radar.offseq.com/threat/cve-2026-90648-cwe-252-unchecked-return-value-in-webassembly-...", "creation_timestamp": "2026-09-13T09:00:29.380636Z"} 2026-09-13T09:00:29.380636+00:00 https://vulnerability.circl.lu/sighting/80a48381-9a83-49cc-9365-2d1c9434d62b/export 2026-09-14T16:23:52.798007+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "80a48381-9a83-49cc-9365-2d1c9434d62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90648", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117262911191284457", "content": "CVE-2026-90648: HIGH severity vuln in wasm2c (WebAssembly wabt <=1.0.41). Unchecked calloc() return enables sandbox escape & code exec if allocation fails \u2014 mainly on 32-bit/memory-limited systems. Patch status pending. https://radar.offseq.com/threat/cve-2026-90648-cwe-252-unchecked-return-value-in-webassembly-wabt-365471fbebafc772 #OffSeq #WebAssembly #CVE202690648", "creation_timestamp": "2026-09-13T09:00:27.452003Z"} 2026-09-13T09:00:27.452003+00:00 https://vulnerability.circl.lu/sighting/054a3661-d44b-43fd-b512-c9854082a2c2/export 2026-09-14T16:23:52.798150+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "054a3661-d44b-43fd-b512-c9854082a2c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90648", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/amjjbwu2chui2", "content": "CVE-2026-90648 - Wabt wasm2c Sandbox Escape Vulnerability\nCVE ID : CVE-2026-90648\n \n Published : Sept. 12, 2026, 11:16 p.m. | 21\u00a0minutes ago\n \n Description : wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platfo...", "creation_timestamp": "2026-09-12T23:55:08.140621Z"} 2026-09-12T23:55:08.140621+00:00