<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-19T21:42:13.740918+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3f16b14c-ca0e-4578-9991-dba3a5b50b6d/export</id>
    <title>3f16b14c-ca0e-4578-9991-dba3a5b50b6d</title>
    <updated>2026-09-19T21:42:13.761489+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3f16b14c-ca0e-4578-9991-dba3a5b50b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsz44wanv2j", "content": "CVE-2026-93605 - vm2\nVersions of the vm2 NodeVM library before 3.12.1 let a malicious piece of code access the system's command tool and run any command it wants. This can happen when the sandbox is set to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-18T20:30:08.865426Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3f16b14c-ca0e-4578-9991-dba3a5b50b6d/export"/>
    <published>2026-09-18T20:30:08.865426+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0226ffa3-2b9b-430e-9457-ed7b7815a521/export</id>
    <title>0226ffa3-2b9b-430e-9457-ed7b7815a521</title>
    <updated>2026-09-19T21:42:13.764144+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0226ffa3-2b9b-430e-9457-ed7b7815a521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvskgr2dny2r", "content": "\ud83d\udea8 CVE-2026-93605 \u2014 CVSS 10 CRITICAL\n\nvm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denyl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93605\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T16:07:39.575854Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0226ffa3-2b9b-430e-9457-ed7b7815a521/export"/>
    <published>2026-09-18T16:07:39.575854+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/855243fd-97ee-4342-b9d6-4776c7178401/export</id>
    <title>855243fd-97ee-4342-b9d6-4776c7178401</title>
    <updated>2026-09-19T21:42:13.764279+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "855243fd-97ee-4342-b9d6-4776c7178401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsgyx7y7j2r", "content": "\ud83d\udd34 CVE-2026-93605 - Critical (10)\n\nvm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUIL...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93605/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T15:06:15.912999Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/855243fd-97ee-4342-b9d6-4776c7178401/export"/>
    <published>2026-09-18T15:06:15.912999+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/56d8654a-95cd-4107-8a54-c93d72fc4547/export</id>
    <title>56d8654a-95cd-4107-8a54-c93d72fc4547</title>
    <updated>2026-09-19T21:42:13.764394+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "56d8654a-95cd-4107-8a54-c93d72fc4547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117292483452078658", "content": "RE: https://infosec.exchange/@cR0w/117287817060203283\nBut wait, there's more perfect 10s!\ud83e\udd73 https://www.cve.org/CVERecord?id=CVE-2026-93603\nhttps://www.cve.org/CVERecord?id=CVE-2026-93605\nhttps://www.cve.org/CVERecord?id=CVE-2026-93606", "creation_timestamp": "2026-09-18T14:21:04.748942Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/56d8654a-95cd-4107-8a54-c93d72fc4547/export"/>
    <published>2026-09-18T14:21:04.748942+00:00</published>
  </entry>
</feed>
