SERVER-OTHER Node.js vm2 sandbox escape remote code execution attempt

IPS-CFWIPS-NPA

2 SIDs: 66649, 66650

Description

Detects an attempt to exploit CVE-2026-43999, a remote code execution flaw that can run code on the server in Node.js vm2 sandbox escape.

CVEs

Related blogs

Python NodeStealer: AI-Assisted to Full Spyware

Python NodeStealer: AI-Assisted to Full Spyware

August 26, 20266 min read

Developers in the Crosshairs: Fake AI Tools Deliver Infostealer

Developers in the Crosshairs: Fake AI Tools Deliver Infostealer

August 3, 20268 min read

macOS ClickFix Campaign: AppleScript Stealers & New Terminal Protections

macOS ClickFix Campaign: AppleScript Stealers & New Terminal Protections

April 20, 20266 min read

From ClickFix to MaaS: Exposing a Modular Windows RAT and Its Admin Panel

From ClickFix to MaaS: Exposing a Modular Windows RAT and Its Admin Panel

April 6, 20268 min read

RedTiger: New Red Teaming Tool in the Wild Targeting Gamers and Discord Accounts

RedTiger: New Red Teaming Tool in the Wild Targeting Gamers and Discord Accounts

October 23, 202510 min read

Glitch-hosted Phishing Uses Telegram & Fake CAPTCHAs to Target Navy Federal Credit Union Customers

Glitch-hosted Phishing Uses Telegram & Fake CAPTCHAs to Target Navy Federal Credit Union Customers

June 2, 20254 min read

Python NodeStealer Targets Facebook Ads Manager with New Techniques

Python NodeStealer Targets Facebook Ads Manager with New Techniques

November 20, 20245 min read

Netskope Threat Coverage: Menorah

Netskope Threat Coverage: Menorah

October 25, 20233 min read

New Python NodeStealer Goes Beyond Facebook Credentials, Now Stealing All Browser Cookies and Login Credentials

New Python NodeStealer Goes Beyond Facebook Credentials, Now Stealing All Browser Cookies and Login Credentials

September 14, 20236 min read

Threat Labs News Roundup: May 2023

June 9, 20234 min read

References

github.com