|
cve-2026-92962
|
2.1 (v4.0)
|
vm2 before 3.11.4 Defense Invariant Violation via setu…
|
patriksimek
|
vm2
|
2026-09-17T13:46:18.295Z |
2026-09-17T15:40:44.491Z |
|
cve-2026-92961
|
8.7 (v4.0)
7.5 (v3.1)
|
vm2 before 3.11.6 Memory Exhaustion DoS via bufferAllo…
|
patriksimek
|
vm2
|
2026-09-17T13:46:17.621Z |
2026-09-21T20:52:43.708Z |
|
cve-2026-92960
|
10 (v4.0)
10 (v3.1)
|
vm2 before 3.11.6 Process-wide State Exposure via os and dns
|
patriksimek
|
vm2
|
2026-09-17T13:46:16.952Z |
2026-09-17T14:22:01.645Z |
|
cve-2026-71568
|
5.3 (v3.1)
|
BMCtest exposes Ironic without authentication and TLS …
|
openshift-metal3
|
bmctest
|
2026-09-17T13:46:16.878Z |
2026-09-17T19:34:27.498Z |
|
cve-2026-92959
|
7.1 (v4.0)
7.1 (v3.1)
|
vm2 before 3.11.8 allowAsync Bypass via Promise Thenable
|
patriksimek
|
vm2
|
2026-09-17T13:46:16.252Z |
2026-09-21T20:41:28.710Z |
|
cve-2026-92958
|
8.4 (v4.0)
8.5 (v3.1)
|
vm2 before 3.11.7 Denylist Bypass via fs/promises
|
patriksimek
|
vm2
|
2026-09-17T13:46:15.549Z |
2026-09-18T19:35:47.679Z |
|
cve-2026-92957
|
9.4 (v4.0)
9.9 (v3.1)
|
vm2 before 3.11.7 NodeVM Builtin Deny-List Bypass via …
|
patriksimek
|
vm2
|
2026-09-17T13:46:14.875Z |
2026-09-26T13:30:01.519Z |
|
cve-2026-92956
|
10 (v4.0)
10 (v3.1)
|
vm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssemb…
|
patriksimek
|
vm2
|
2026-09-17T13:46:14.202Z |
2026-09-17T19:20:26.124Z |
|
cve-2026-92955
|
10 (v4.0)
10 (v3.1)
|
vm2 before 3.11.8 Sandbox Escape via NodeVM
|
patriksimek
|
vm2
|
2026-09-17T13:46:13.508Z |
2026-09-17T14:23:35.469Z |
|
cve-2026-92954
|
9.2 (v4.0)
8.6 (v3.1)
|
vm2 3.10.0 through 3.11.7 Denial of Service via Host Promise
|
patriksimek
|
vm2
|
2026-09-17T13:46:12.820Z |
2026-09-26T13:30:00.813Z |
|
cve-2026-92953
|
9.3 (v4.0)
10 (v3.1)
|
vm2 3.11.0 through 3.11.7 Prototype Pollution via TypedArray
|
patriksimek
|
vm2
|
2026-09-17T13:46:12.146Z |
2026-09-18T19:49:31.925Z |
|
cve-2026-92952
|
8.9 (v4.0)
6.8 (v3.1)
|
vm2 3.11.4 through 3.11.6 Sandbox Symbol Filtering Bypass
|
patriksimek
|
vm2
|
2026-09-17T13:46:11.469Z |
2026-09-17T15:44:51.213Z |
|
cve-2026-92951
|
9.4 (v4.0)
9.9 (v3.1)
|
vm2 before 3.11.7 Module Allowlist Bypass via Custom R…
|
patriksimek
|
vm2
|
2026-09-17T13:46:10.792Z |
2026-09-17T19:20:34.322Z |
|
cve-2026-92950
|
9.3 (v4.0)
8.6 (v3.1)
|
vm2 before 3.11.7 Sandbox Escape via CLI require
|
patriksimek
|
vm2
|
2026-09-17T13:46:10.113Z |
2026-09-17T14:24:26.002Z |
|
cve-2026-92949
|
6.3 (v4.0)
4 (v3.1)
|
vm2 3.9.6 before 3.11.7 Sandbox Bypass via Accessor De…
|
patriksimek
|
vm2
|
2026-09-17T13:46:09.471Z |
2026-09-21T17:14:33.106Z |
|
cve-2026-92948
|
9.4 (v4.0)
9.9 (v3.1)
|
vm2 3.9.6 through 3.11.5 Sandbox Escape via node:test
|
patriksimek
|
vm2
|
2026-09-17T13:46:08.814Z |
2026-09-18T19:31:54.395Z |
|
cve-2026-92947
|
10 (v4.0)
10 (v3.1)
|
vm2 before 3.11.7 Memory Disclosure via Buffer Pool
|
patriksimek
|
vm2
|
2026-09-17T13:46:08.167Z |
2026-09-17T15:47:14.117Z |
|
cve-2026-92946
|
10 (v4.0)
10 (v3.1)
|
vm2 before 3.11.7 Remote Code Execution via require.external
|
patriksimek
|
vm2
|
2026-09-17T13:46:07.498Z |
2026-09-17T19:20:46.387Z |
|
cve-2026-92945
|
2.3 (v4.0)
4.2 (v3.1)
|
vm2 before 3.11.7 Module Allowlist Bypass via Prefix M…
|
patriksimek
|
vm2
|
2026-09-17T13:46:06.857Z |
2026-09-17T14:25:31.730Z |
|
cve-2026-92944
|
9.3 (v4.0)
9.8 (v3.1)
|
vm2 3.10.2 through 3.11.6 Sandbox Escape via Promise P…
|
patriksimek
|
vm2
|
2026-09-17T13:46:06.201Z |
2026-09-19T02:31:01.016Z |
|
cve-2026-92942
|
8.7 (v4.0)
7.5 (v3.1)
|
vm2 before 3.11.7 Timeout Bypass via FinalizationRegistry
|
patriksimek
|
vm2
|
2026-09-17T13:46:05.537Z |
2026-09-18T19:34:23.775Z |
|
cve-2026-92941
|
10 (v4.0)
10 (v3.1)
|
vm2 3.11.3 before 3.11.7 TLS Trust Store Manipulation
|
patriksimek
|
vm2
|
2026-09-17T13:46:04.885Z |
2026-09-17T15:48:59.103Z |
|
cve-2026-92940
|
10 (v4.0)
10 (v3.1)
|
vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure vi…
|
patriksimek
|
vm2
|
2026-09-17T13:46:04.218Z |
2026-09-17T19:20:52.899Z |
|
cve-2026-92939
|
9.4 (v4.0)
9.9 (v3.1)
|
vm2 3.11.3 through 3.11.6 Native Code Execution via cr…
|
patriksimek
|
vm2
|
2026-09-17T13:46:03.558Z |
2026-09-17T14:26:31.623Z |
|
cve-2026-92938
|
9.4 (v4.0)
9.9 (v3.1)
|
vm2 3.11.3 through 3.11.6 Remote Code Execution via no…
|
patriksimek
|
vm2
|
2026-09-17T13:46:02.866Z |
2026-09-19T02:28:41.247Z |
|
cve-2026-92937
|
10 (v4.0)
10 (v3.1)
|
vm2 3.11.6 Remote Code Execution via Promise call/apply
|
patriksimek
|
vm2
|
2026-09-17T13:46:02.195Z |
2026-09-18T19:25:51.435Z |
|
cve-2026-92936
|
6.9 (v4.0)
5.8 (v3.1)
|
vm2 3.11.0 before 3.11.7 Information Disclosure via Er…
|
patriksimek
|
vm2
|
2026-09-17T13:46:01.524Z |
2026-09-17T15:52:18.255Z |
|
cve-2026-92935
|
9.5 (v4.0)
9 (v3.1)
|
vm2 NodeVM Remote Code Execution via Array-Shaped Require
|
patriksimek
|
vm2
|
2026-09-17T13:46:00.854Z |
2026-09-17T19:21:04.162Z |
|
cve-2026-92934
|
9.5 (v4.0)
9 (v3.1)
|
vm2 before 3.11.8 Sandbox Escape RCE via AggregateError
|
patriksimek
|
vm2
|
2026-09-17T13:46:00.130Z |
2026-09-17T14:27:25.575Z |
|
cve-2026-92933
|
6.9 (v4.0)
5.8 (v3.1)
|
vm2 before 3.11.8 Information Disclosure via util.getC…
|
patriksimek
|
vm2
|
2026-09-17T13:45:59.246Z |
2026-09-19T02:27:07.171Z |