VulnSocial

CVE-2026-93605Patch

LOWCVSS 10.0 · CRITICAL

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denylist omits child_process despite blocking other host-spawning modules. Attackers can require child_process and execute arbitrary commands on the host system when NodeVM is configured with builtin:['*'] or explicit child_process allowance.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-693

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-09-19)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-18: 1Mentions · 2026-09-19: 2PoC Mentioned / Linked · 2026-09-19: 1Patch / Workaround · 2026-09-18: 1Patch / Workaround · 2026-09-19: 1Technical Details · 2026-09-18: 1Technical Details · 2026-09-19: 109-1809-19
Signal classification3 categories
Patch
133.3%
General
133.3%
PoC
133.3%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-09-181
Patch1
2026-09-192
General1PoC1
Full discourse3 posts
  • Rıdvan Yağlı@ridvanyagli
    Patch

    🔴 vm2'de birden fazla Kritik Sandbox Escape & RCE açığı! - CVSS 10.0 Node.js uygulamalarında JavaScript kodunu izole bir sandbox konteynerinde çalıştırmak için kullanılan vm2'de 3 kritik güvenlik açığı tespit edildi. CVE-2026-93603, CVE-2026-93605 ve CVE-2026-93606 saldırganların sandbox konteynerinden çıkarak ana Node.js sürecinde keyfi kod çalıştırmasına (RCE) olanak sağlıyor. 📌 Etkilenen: vm2 ≤ 3.12.0 ✅ Çözüm: vm2 3.12.1+ Özellikle kullanıcı kontrollü JavaScript'i vm2 ile çalıştıran uygulamaların acilen güncellenmesi gerekiyor.

    Post summary

    The text announces three critical VM2 vulnerabilities (CVE-2026-93603, CVE-2026-93605, CVE-2026-93606) enabling RCE, specifies affected versions (≤3.12.0), and recommends patching via upgrade to 3.12.1+.

    00032431
    2.5K followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2025-15399 CVE-2026-10747 CVE-2026-93603 CVE-2026-93605 CVE-2026-93606 ..🧵👇

    Post summary

    The text is a threat digest listing CVEs without specific details, PoCs, exploit tools, or remediation steps. It serves as a general mention with limited actionable intelligence.

    1001078
    50 followersView on X
  • ExploitGrid@exploitgrid
    PoC

    [CVE] CVE-2026-93605 [HIGH PRIORITY] #vm2 NodeVM before 3.12.1 Remote Code Execution via child_process 🔗 https://exploitgrid.net/cve/CVE-2026-93605

    Post summary

    CVE-2026-93605 is a HIGH PRIORITY RCE vulnerability in vm2 NodeVM before 3.12.1 via child_process, with a link to exploit/PoC details and an implied fix in version 3.12.1.

    1000026
    50 followersView on X

Explore more

Back to dashboard