The October 2026 advisory cluster (CVE-2026-115889, -115893, -115892) confirms that compiler-level bugs are the primary vector for sandbox escape. CVE-2026-115889 (CVSS 9.9) involves SSA value index overflow in Cranelift, where crafted Wasm functions overflow 24-bit fields, causing type confusion on every architecture. CVE-2026-115893 (CVSS 9.9, AArch64-only) exploits a `br_table` with more than ~256,000 targets compiling to an incorrect conditional branch target, allowing jumps to attacker-controlled offsets. ▸ CVE-2026-115892 (CVSS 5.7, DoS — distinct from the two sandbox escapes): lowering a host-created stream/future into a guest expecting a different payload type can omit the required payload-type check; a guest triggering the mismatch panics the host runtime, a denial of service rather than an escape. ▸ Trap semantics lock down the entire Store upon any fault, complicating recovery and diagnostics. Resource isolation remains underprotected. Malicious instances can exhaust host resources via WASI interfaces, degrading co-located containers (arXiv:2509.11242). Debugging gaps persist as a primary barrier to production adoption. JIT debugging support is in progress, but monitoring resource isolation and managing trap-induced store lockdowns remain critical operational challenges. 5/6