VDB
CVE-2026-24781
CVE-2026-24781
PUBLISHED
CVSS 8.699999809265137 HIGH
vm2 ist eine Sandbox, in der nicht vertrauenswürdiger Code der in Node integrierten Module ausgeführt werden kann.
EPSS 1.19% · 65.4th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
1.19%
65.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux | |
| Open Source | Open Source vm2 <3.11.1 | |
| Oracle | Oracle Linux | |
| Open Source | Open Source vm2 |
Timeline
- May 3, 2026 CVE Published
- May 4, 2026 PoC Published
- May 16, 2026 Security Advisory
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1349.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1349 advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-2cm2-m3w5-gp2f advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-47x8-96vw-5wg6 advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-55hx-c926-fr95 advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-6785-pvv7-mvg7 advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-8hg8-63c5-gwmx advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-947f-4v7f-x2v8 advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-9qj6-qjgg-37qq advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-9vg3-4rfj-wgcm advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-cp6g-6699-wx9c advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-ffh4-j6h5-pg66 advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-grj5-jjm8-h35p advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-hw58-p9xv-2mjh advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-mpf8-4hx2-7cjg advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-qcp4-v2jj-fjx8 advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-qvjj-29qf-hp7p advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-v27g-jcqj-v8rw advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-v37h-5mfm-c47c advisory
- https://github.com/patriksimek/vm2/security/advisories/GHSA-vwrp-x96c-mhwq advisory
…and 4 more