SERVER-WEBAPP VM2 JavaScript remote code execution attempt

IPS-CFWIPS-NPA

6 SIDs: 66521, 66522, 66554, 66555, 66557, 66558

Description

Detects an attempt to exploit CVE-2026-26332, CVE-2026-26956, and CVE-2026-24781, a remote code execution flaw that can run code on the server in VM2 JavaScript.

CVEs

CVE-2026-26956 CVE-2026-26332 CVE-2026-24781

References

github.com
github.com
github.com