Open Source vm2

productDE

cpe:/a:vm2_project:vm2:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical1high2medium0low

updated 2026-10-28

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-24118US	—	0.91% (60th)	Exploit	no fix	2026-05-04	—
CVE-2026-22709US	critical10.0	1.27% (70th)	—	no fix	2026-01-26	—
CVE-2026-24781US	—	1.19% (68th)	—	no fix	2026-05-04	—
CVE-2026-26956US	—	1.09% (65th)	—	no fix	2026-05-04	—
CVE-2026-43997US	—	0.98% (62nd)	—	no fix	2026-05-13	—
CVE-2026-43999US	—OT elevated	0.97% (62nd)	—	no fix	2026-05-13	—
CVE-2026-44007US	—	0.96% (61st)	—	no fix	2026-05-13	—
CVE-2026-24120US	—	0.90% (59th)	—	no fix	2026-05-04	—
CVE-2026-44005US	—	0.83% (57th)	—	no fix	2026-05-13	—
CVE-2026-44006US	—	0.81% (57th)	—	no fix	2026-05-13	—
CVE-2026-26332US	critical10.0	0.71% (53rd)	—	no fix	2026-05-04	—
CVE-2026-44001US	—	0.45% (39th)	—	no fix	2026-05-13	—
CVE-2026-92963US	medium5.3	0.34% (28th)	—	no fix	2026-09-17	—
CVE-2026-44003US	medium5.8	0.25% (16th)	—	no fix	2026-05-13	—
CVE-2026-44002US	—	0.24% (15th)	—	no fix	2026-05-13	—
CVE-2026-44000US	high7.2	0.20% (10th)	—	no fix	2026-05-13	—

The flaw types (CWEs) most of these CVEs share.

CWE-693Protection Mechanism Failure10 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')9 CVEs
CWE-653Improper Isolation or Compartmentalization5 CVEs
CWE-1100Insufficient Isolation of System-Dependent Functions1 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-227CWE-2271 CVEs
CWE-248Uncaught Exception1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.