poslední zpráva · zachyceno
SPOJENO AI
Vulnerabilities in n8n
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.5, CVEs: CVE-2026-103245, CVE-2026-103246, CVE-2026-103247, CVE-2026-103248, CVE-2026-103249, CVE-2026-103250, CVE-2026-103251, CVE-2026-103252, CVE-2026-103253, CVE-2026-103254, CVE-2026-103255, CVE-2026-103256, CVE-2026-103257, CVE-2026-103258, CVE-2026-103259, CVE-2026-103260, Summary: CVE-2026-103245 (CVSS: 6.9): n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1…
n8n FI CA IT
CVE v události 16
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-103245 | 6.9 4.0 · VulnCheck 5.3 3.1 · VulnCheck | – | – |
| CVE-2026-103246 | 8.3 4.0 · VulnCheck 7.7 3.1 · VulnCheck | – | – |
| CVE-2026-103247 | 8.5 3.1 · VulnCheck 5.8 4.0 · VulnCheck | – | – |
| CVE-2026-103248 | 9.0 3.1 · VulnCheck 7.1 4.0 · VulnCheck | – | – |
| CVE-2026-103249 | 7.6 3.1 · VulnCheck 6.9 4.0 · VulnCheck | – | – |
| CVE-2026-103250 | 8.1 3.1 · VulnCheck 7.0 4.0 · VulnCheck | – | – |
| CVE-2026-103251 | 7.5 4.0 · VulnCheck 7.1 3.1 · VulnCheck | – | – |
| CVE-2026-103252 | 7.7 3.1 · VulnCheck 7.1 4.0 · VulnCheck | – | – |
| CVE-2026-103253 | 8.7 3.1 · VulnCheck 7.0 4.0 · VulnCheck | – | – |
| CVE-2026-103254 | 7.0 4.0 · VulnCheck 6.3 3.1 · VulnCheck | – | – |
| CVE-2026-103255 | 9.0 3.1 · VulnCheck 7.1 4.0 · VulnCheck | – | – |
| CVE-2026-103256 | 7.1 3.1 · VulnCheck 7.1 4.0 · VulnCheck | – | – |
| CVE-2026-103257 | 8.1 4.0 · VulnCheck 7.7 3.1 · VulnCheck | – | – |
| CVE-2026-103258 | 6.9 4.0 · VulnCheck 6.8 3.1 · VulnCheck | – | – |
| CVE-2026-103259 | 8.5 4.0 · VulnCheck 7.6 3.1 · VulnCheck | – | – |
| CVE-2026-103260 | 6.3 4.0 · VulnCheck 4.0 3.1 · VulnCheck | – | – |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.5.
Jak se o tom psalo 3
-
· zachyceno · NCSC-FI FI nadpis události
Vulnerabilities in n8n
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.5, CVEs: CVE-2026-103245, CVE-2026-103246, CVE-2026-103247, CVE-2026-103248, CVE-2026-103249, CVE-2026-103250, CVE-2026-103251, CVE-2026-103252, CVE-2026-103253, CVE-2026-103254, CVE-2026-103255, CVE-2026-103256, CVE-2026-103257, CVE-2026-103258, CVE-2026-103259, CVE-2026-103260, Summary: CVE-2026-103245 (CVSS: 6.9): n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1…
-
· Cyber Centre Kanada CA
n8n security advisory (AV26-985)
Serial number: AV26-985 Date: October 1, 2026 As of October 1, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 1.123.80 Prior to 2.39.6 Prior to 2.40.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Community Package Install Validation Bypass via PubSub in Queue Mode Deployments Dynamic Credentials Authorize Endpoint Leaks Session Token to Attacker-Controlled Resolver…
-
· CSIRT Itálie (ACN) IT
Rilevate vulnerabilità in n8n
Il team di sviluppo n8n-io ha rilevato nuove vulnerabilità, di cui 11 con gravità "alta", che interessano la piattaforma open-source per l'automazione dei workflow n8n. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un attaccante di ottenere informazioni riservate, eludere misure di sicurezza e meccanismi di autenticazione o eseguire codice arbitrario sui sistemi interessati.