vm2: Mehrere Schwachstellen ermöglichen Codeausführung — WID-SEC-2026-3189
BSI · WID-SEC-2026-3189
ID
WID-SEC-2026-3189
WID-SEC-2026-3189
Date
Source
BSI
BSI
Threat
critical
critical
Summary
vm2 ist eine Sandbox, in der nicht vertrauenswürdiger Code der in Node integrierten Module ausgeführt werden kann.
Timeline
- Published by source
- 2026-09-04
Risk context
- Reported severity or threat level: critical.
What to do
General, cautious steps (verify details in the official source):
- Prioritize patching or mitigation immediately (treat as actively risky).
- Identify affected product versions in your inventory and verify whether you are impacted.
- Apply vendor patches/updates or recommended mitigations as soon as available.
- Read the official advisory for exact affected versions and remediation steps.
Official advisory
Evidence and provenance
- Canonical advisory ID
- WID-SEC-2026-3189
- Source
- BSI
- Published by source
- 2026-09-04
- Last source activity
- 2026-09-04
- Curated by
- hlukh.ch
Related advisories and connections
These advisories are connected by shared CVE, product, vendor, source, or time signals.