https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:15:27.994182+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-14937 bdu:2026-14937 2026-10-02T17:15:28.080814+00:00 bdu:2026-14937 https://cve.radiocsirt.org/vuln/euvd-2026-371543 EUVD-2026-371543 2026-10-02T17:15:28.080860+00:00 EUVD-2026-371543 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92946 fkie_cve-2026-92946 2026-10-02T17:15:28.080884+00:00

vm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without an explicit require.root that excludes node_modules. Sandboxed code can require vm2's own package, instantiate an unrestricted NodeVM instance, and execute arbitrary host OS commands via child_process.

 https://cve.radiocsirt.org/vuln/ghsa-29x6-9qh5-83gg GHSA-29x6-9qh5-83gg 2026-10-02T17:15:28.080933+00:00

vm2 before 3.11.7 contains a remote code execution vulnerability when require.external is enabled without an explicit require.root that excludes node_modules. Sandboxed code can require vm2's own package, instantiate an unrestricted NodeVM instance, and execute arbitrary host OS commands via child_process.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2997 WID-SEC-W-2026-2997 — vm2: Mehrere Schwachstellen 2026-10-02T17:15:28.080962+00:00

Ein Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen und um beliebigen Programmcode auszuführen.