shreyas-malhotra/CVE-2026-115893-wasmtime-sandbox-escape

PoC

CVE-2026-115893: full Wasmtime aarch64 Cranelift br_table sandbox-escape public exploit, PoV, calibration notes, and verification evidence.

view exploit source poc_in_githubauthor shreyas-malhotrapublished 2026-10-27catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-115893US	—	0.99% (62nd)	Exploit	2026-10-23
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approx…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.