Netskope Threat Labs

SERVER-OTHER NodeJS vm2 sandbox escape remote code execution attempt

IPS-CFWIPS-NPA

14 SIDs: 66541, 66542, 66544, 66545, 66547, 66548, 66550, 66551, 66578, 66579, 66596, 66597, 66615, 66616

Detects an attempt to exploit CVE-2026-44006, CVE-2026-44008, CVE-2026-44009, and 4 others, a remote code execution flaw that can run code on the server in NodeJS vm2 sandbox escape.