{"vulnerability": "cve-2026-9360", "sightings": [{"uuid": "636144d6-ee55-4e08-9da2-a8be37acd346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9360", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmllz5x2pp2m", "content": "Edimax EW-7438RPn v1.28a hit by HIGH severity buffer overflow (CVE-2026-9360). Remote exploit public, no patch yet \u2014 disable remote access or isolate device now. https://radar.offseq.com/threat/cve-2026-9360-buffer-overflow-in-edimax-ew-7438rpn-4e6fd99f #OffSeq #IoTSecurity", "creation_timestamp": "2026-05-24T09:00:28.314840Z"}, {"uuid": "3d346902-80e2-42fb-90ca-f0299693138f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93603", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117292483452078658", "content": "RE: https://infosec.exchange/@cR0w/117287817060203283\nBut wait, there's more perfect 10s!\ud83e\udd73 https://www.cve.org/CVERecord?id=CVE-2026-93603\nhttps://www.cve.org/CVERecord?id=CVE-2026-93605\nhttps://www.cve.org/CVERecord?id=CVE-2026-93606", "creation_timestamp": "2026-09-18T14:21:04.705700Z"}, {"uuid": "56d8654a-95cd-4107-8a54-c93d72fc4547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117292483452078658", "content": "RE: https://infosec.exchange/@cR0w/117287817060203283\nBut wait, there's more perfect 10s!\ud83e\udd73 https://www.cve.org/CVERecord?id=CVE-2026-93603\nhttps://www.cve.org/CVERecord?id=CVE-2026-93605\nhttps://www.cve.org/CVERecord?id=CVE-2026-93606", "creation_timestamp": "2026-09-18T14:21:04.748942Z"}, {"uuid": "a215b236-114d-4f54-8185-99125c591ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93606", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117292483452078658", "content": "RE: https://infosec.exchange/@cR0w/117287817060203283\nBut wait, there's more perfect 10s!\ud83e\udd73 https://www.cve.org/CVERecord?id=CVE-2026-93603\nhttps://www.cve.org/CVERecord?id=CVE-2026-93605\nhttps://www.cve.org/CVERecord?id=CVE-2026-93606", "creation_timestamp": "2026-09-18T14:21:04.786165Z"}, {"uuid": "eea1bb19-8f34-4339-9355-24309132bb5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93603", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsgypqkbn2e", "content": "\ud83d\udd34 CVE-2026-93603 - Critical (10)\n\nvm2 through 3.12.0 (fixed in 3.12.1) does not correctly handle a nullish `this` receiver in the a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93603/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T15:06:08.815643Z"}, {"uuid": "855243fd-97ee-4342-b9d6-4776c7178401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsgyx7y7j2r", "content": "\ud83d\udd34 CVE-2026-93605 - Critical (10)\n\nvm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUIL...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93605/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T15:06:15.912999Z"}, {"uuid": "cfb86efb-4890-411f-96c0-a2f1e2e520b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93606", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsgz6eggw2m", "content": "\ud83d\udd34 CVE-2026-93606 - Critical (10)\n\nvm2 (npm) versions 3.12.0 and earlier contain a sandbox escape in `VM` and `NodeVM`. When an embe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93606/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T15:06:23.343410Z"}, {"uuid": "60bfe364-85d0-47e3-9b25-22b6ed40a01b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93603", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvskgj25mf2j", "content": "\ud83d\udea8 CVE-2026-93603 \u2014 CVSS 10 CRITICAL\n\nvm2 through 3.12.0 (fixed in 3.12.1) does not correctly handle a nullish `this` receiver in the apply trap ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93603\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T16:07:30.978546Z"}, {"uuid": "0226ffa3-2b9b-430e-9457-ed7b7815a521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvskgr2dny2r", "content": "\ud83d\udea8 CVE-2026-93605 \u2014 CVSS 10 CRITICAL\n\nvm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denyl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93605\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T16:07:39.575854Z"}, {"uuid": "84f79969-0597-4bc9-b78e-4a9fb86d7110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93606", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvskgyy3k72b", "content": "\ud83d\udea8 CVE-2026-93606 \u2014 CVSS 10 CRITICAL\n\nvm2 (npm) versions 3.12.0 and earlier contain a sandbox escape in `VM` and `NodeVM`. When an embedder expos...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93606\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T16:07:47.766715Z"}, {"uuid": "dddd4ec3-ab19-4f96-8feb-f46bb79faec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93604", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/h73hl4fhqsool", "content": "CVE-2026-93604 - vm2 3.11.8 Sandbox Escape via crypto.setFips\nCVE ID : CVE-2026-93604\n \n Published : Sept. 18, 2026, 2:19 p.m. | 19\u00a0minutes ago\n \n Description : vm2 through 3.12.0 exposes Node.js's crypto.setFips() function to untrusted guest code when an embedder explicitly a...", "creation_timestamp": "2026-09-18T16:17:30.861312Z"}, {"uuid": "d07bac21-3c67-4fd5-a0cf-d725f5be7b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93603", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsz3zmtlq22", "content": "CVE-2026-93603 - vm2\nThe vm2 JavaScript sandbox (versions before 3.12.1) can mistakenly give untrusted code access to the host system's global objects. If your application exposes any non\u2011strict host\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-18T20:30:06.441798Z"}, {"uuid": "3f16b14c-ca0e-4578-9991-dba3a5b50b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93605", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsz44wanv2j", "content": "CVE-2026-93605 - vm2\nVersions of the vm2 NodeVM library before 3.12.1 let a malicious piece of code access the system's command tool and run any command it wants. This can happen when the sandbox is set to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-18T20:30:08.865426Z"}, {"uuid": "fb05e229-52ae-4b42-ae1e-b56985e20890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93606", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvt27s5u2i2g", "content": "CVE-2026-93606 - vm2\nVersions of the vm2 package prior to 3.12.1 allow code running inside its sandbox to break out and interact directly with the host system. If the sandbox is given a host function that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#vm2 #patriksimek #CVE #infosec", "creation_timestamp": "2026-09-18T20:50:05.931902Z"}, {"uuid": "8a14cf10-db69-45c2-ae1b-4977acb8306c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-93605", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-pq68-rvw4-xp4r", "content": "", "creation_timestamp": "2026-10-07T18:05:00.000000Z"}]}