https://vulnerability.circl.lu/sightings/feed 2026-09-18T02:41:40.820879+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/48930476-e440-4a27-8c76-7ad8ddda9e83/export 2026-09-18T02:41:40.841615+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "48930476-e440-4a27-8c76-7ad8ddda9e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92951", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117287817060203283", "content": "ICYMI: 19 sev:CRIT CVEs in Node VM2, which is supposed to be a sandbox, but apparently it's built like the AI \"sandboxes.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-92934https://www.cve.org/CVERecord?id=CVE-2026-92935https://www.cve.org/CVERecord?id=CVE-2026-92937https://www.cve.org/CVERecord?id=CVE-2026-92938https://www.cve.org/CVERecord?id=CVE-2026-92939https://www.cve.org/CVERecord?id=CVE-2026-92940https://www.cve.org/CVERecord?id=CVE-2026-92941https://www.cve.org/CVERecord?id=CVE-2026-92944https://www.cve.org/CVERecord?id=CVE-2026-92946https://www.cve.org/CVERecord?id=CVE-2026-92947https://www.cve.org/CVERecord?id=CVE-2026-92948https://www.cve.org/CVERecord?id=CVE-2026-92950https://www.cve.org/CVERecord?id=CVE-2026-92951https://www.cve.org/CVERecord?id=CVE-2026-92953https://www.cve.org/CVERecord?id=CVE-2026-92954https://www.cve.org/CVERecord?id=CVE-2026-92955https://www.cve.org/CVERecord?id=CVE-2026-92956https://www.cve.org/CVERecord?id=CVE-2026-92957https://www.cve.org/CVERecord?id=CVE-2026-92960", "creation_timestamp": "2026-09-17T18:34:21.959111Z"} 2026-09-17T18:34:21.959111+00:00 https://vulnerability.circl.lu/sighting/9b245890-d3a5-4ce4-a0de-a99318ac70d9/export 2026-09-18T02:41:40.844145+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9b245890-d3a5-4ce4-a0de-a99318ac70d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92951", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq3rtbfv62n", "content": "CVE-2026-92951 - vm2\nThe vm2 sandbox library can be tricked into loading code that isn\u2019t approved, letting attackers run unwanted programs on the host system. This happens because the library checks package\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-17T16:40:05.255744Z"} 2026-09-17T16:40:05.255744+00:00 https://vulnerability.circl.lu/sighting/d8f2d6cb-cfa9-441a-a6a0-1a10402913fb/export 2026-09-18T02:41:40.844283+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d8f2d6cb-cfa9-441a-a6a0-1a10402913fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92951", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvq2423nor2y", "content": "\ud83d\udea8 CVE-2026-92951 \u2014 CVSS 9.4 CRITICAL\n\nvm2 before 3.11.7 contains an incorrect authorization vulnerability in the external package allowlist check...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92951\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:10:00.416028Z"} 2026-09-17T16:10:00.416028+00:00