SneakyNachos/CVE-2026-2796-escape-wasm-by-using-wasm

PoC

PoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion -> arbitrary R/W -> RCE)

view exploit source poc_in_githubauthor SneakyNachospublished 2026-08-20catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-2796US	critical9.8	0.95% (61st)	Exploit	2026-02-24
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.