Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
3 IOCs

Wasmtime Sandbox Escape Flaws Patched in Cranelift

SOCRadar
SOCRadar
Published October 27, 2026Original Report

Excerpt

Two critical Wasmtime sandbox escape flaws, CVE-2026-115889 and CVE-2026-115893, let a crafted WebAssembly (Wasm) module push the Cranelift compiler into generating unsafe machine code. The Bytecode Alliance fixed both on October 19, 2026, and rated each 9.9 under CVSS v3.1. Platforms that compile Wasm from customers or other outside parties carry the most risk, because they depend on Wasmtime to keep that code contained. One flaw affects every architecture, while the other…

Read the original report →

Indicators of Compromise

Open the mindmap →

3 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-115889MediumScore 51/100First seen
CVECVE-2026-115893MediumScore 51/100First seen
CVECVE-2026-34971MediumScore 51/100First seen

IOC Relationship Graph

Building graph…