EUVD-2026-60460Published
vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCE
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-47686 · Microsoft / collected KEV context
cve-program · CVE-2026-47686
- https://github.com/patriksimek/vm2/security/advisories/GHSA-m283-3h24-438v
- https://github.com/patriksimek/vm2/commit/7e3faaf550f4ab975bf4cdde183fcec49b056d8e
- https://github.com/patriksimek/vm2/releases/tag/3.11.6
euvd · EUVD-2026-60460
- https://github.com/patriksimek/vm2/security/advisories/GHSA-m283-3h24-438v
- https://github.com/patriksimek/vm2/commit/7e3faaf550f4ab975bf4cdde183fcec49b056d8e
- https://github.com/patriksimek/vm2/releases/tag/3.11.6
nvd · CVE-2026-47686
- https://github.com/patriksimek/vm2/commit/7e3faaf550f4ab975bf4cdde183fcec49b056d8e
- https://github.com/patriksimek/vm2/releases/tag/3.11.6
- https://github.com/patriksimek/vm2/security/advisories/GHSA-m283-3h24-438v