Vm2

Vulnerability

Threat entity extracted from intelligence sources

Frequency

6

occurrences

First Seen

January 27, 2026

Last Seen

October 2, 2026

Overview

Recent Events

Related Clusters (3)

Critical vm2 Vulnerability Allows Arbitrary Code Execution on Host Systems

May 7·8 sources

Critical Sandbox Escape Vulnerability in vm2 Library Disclosed

Oct 2·1 sources

Critical vm2 Vulnerability in Node.js Allows Code Execution

Jan 27·13 sources

Related Articles (6)

Read the full report for CVE-2026-92948 on our website

cvereports.com·Oct 2

GitHub Security Advisory

github.com·Oct 2

CVE-2026-92948: Sandbox Escape and Remote Code Execution in vm2 via node:test

Node.js 25: Escapes from JavaScript sandbox vm2 conceivable

Heise.De·May 7

Critical sandbox escape flaw discovered in popular vm2 NodeJS library

Bleepingcomputer·Jan 27

1 / 2

Related Entities

Zero-day Exploit Remote Code Execution CVE-2026-92948 CVE-2026-22709 CVE-2026-26956 CWE-94 - Code Injection T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution Isolated-vm NodeJS Node.js Docker