Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-14586 |
|
Vulnerability in dos (CVE-2026-14586)
vulnerability in dos (CVE-2026-14586). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13192 |
|
SSRF (Server-Side Request Forgery) in progress (CVE-2026-13192)
SSRF in progress (CVE-2026-13192). Confidential information can be exposed externally.
|
| CVE-2026-13189 |
|
Vulnerability in progress (CVE-2026-13189)
vulnerability in progress (CVE-2026-13189). Confidential information can be exposed externally.
|
| CVE-2026-13190 |
|
Unsafe Deserialization in deserialization (CVE-2026-13190)
vulnerability in deserialization (CVE-2026-13190). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13183 |
|
Vulnerability in progress (CVE-2026-13183)
vulnerability in progress (CVE-2026-13183). Confidential information can be exposed externally.
|
| CVE-2026-13187 |
|
Vulnerability in progress (CVE-2026-13187)
vulnerability in progress (CVE-2026-13187). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13188 |
|
Vulnerability in progress (CVE-2026-13188)
vulnerability in progress (CVE-2026-13188). Data can be tampered with by attackers.
|
| CVE-2026-13186 |
|
Path Traversal in path-traversal (CVE-2026-13186)
path traversal in path-traversal (CVE-2026-13186). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13184 |
|
Vulnerability in progress (CVE-2026-13184)
vulnerability in progress (CVE-2026-13184). Data can be tampered with by attackers.
|
| CVE-2026-13185 |
|
Unsafe Deserialization in progress (CVE-2026-13185)
vulnerability in progress (CVE-2026-13185). Successful exploitation can lead to full system takeover.
|
| CVE-2026-13182 |
|
Vulnerability in progress (CVE-2026-13182)
vulnerability in progress (CVE-2026-13182). Confidential information can be exposed externally.
|
| CVE-2026-8152 |
|
Cross-Site Scripting (XSS) in CVE-2026-8152 (CVE-2026-8152)
cross-site scripting in CVE-2026-8152 (CVE-2026-8152). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-13181 |
|
Vulnerability in progress (CVE-2026-13181)
vulnerability in progress (CVE-2026-13181). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44191 |
|
OS Command Injection in CVE-2026-44191 (CVE-2026-44191)
OS command injection in CVE-2026-44191 (CVE-2026-44191). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16270 |
|
Vulnerability in dos (CVE-2026-16270)
vulnerability in dos (CVE-2026-16270). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48029 |
|
Out-of-Bounds Read in struktur (CVE-2026-48029)
vulnerability in struktur (CVE-2026-48029). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65599 |
|
Vulnerability in n8n (CVE-2026-65599)
vulnerability in n8n (CVE-2026-65599). Confidential information can be exposed externally. Exploitable via ``kid``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65598 |
|
Vulnerability in n8n (CVE-2026-65598)
vulnerability in n8n (CVE-2026-65598). Successful exploitation can lead to full system takeover. Exploitable via ``clone``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65603 |
|
Privilege Escalation in privilege-escalation (CVE-2026-65603)
vulnerability in privilege-escalation (CVE-2026-65603). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.8.12` or later.
|
| CVE-2026-65600 |
|
Path Traversal in github.com/traefik/traefik/v2 (CVE-2026-65600)
path traversal in github.com/traefik/traefik/v2 (CVE-2026-65600). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api../admin`. Mitigation: upgrade to `2.11.52` or later.
|
| CVE-2026-65602 |
|
Authorization Flaw in github.com/traefik/traefik (CVE-2026-65602)
vulnerability in github.com/traefik/traefik (CVE-2026-65602). Successful exploitation can lead to full system takeover. Exploitable via ``crossProviderNamespaces``. Mitigation: upgrade to `3.7.7` or later.
|
| CVE-2026-65601 |
|
Authorization Flaw in github.com/traefik/traefik (CVE-2026-65601)
vulnerability in github.com/traefik/traefik (CVE-2026-65601). Successful exploitation can lead to full system takeover. Exploitable via ``HTTPRoute``. Mitigation: upgrade to `3.7.7` or later.
|
| CVE-2026-65597 |
|
Cross-Site Scripting (XSS) in n8n (CVE-2026-65597)
cross-site scripting in n8n (CVE-2026-65597). Risk of unauthorized operations or information disclosure. Exploitable via ``sandbox``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65592 |
|
Cross-Site Scripting (XSS) in n8n (CVE-2026-65592)
cross-site scripting in n8n (CVE-2026-65592). Risk of unauthorized operations or information disclosure. Exploitable via ``cachedResultUrl``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65596 |
|
Authorization Flaw in n8n (CVE-2026-65596)
vulnerability in n8n (CVE-2026-65596). Confidential information can be exposed externally. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65590 |
|
OS Command Injection in @n8n/computer-use (CVE-2026-65590)
OS command injection in @n8n/computer-use (CVE-2026-65590). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65014 |
|
Vulnerability in n8n (CVE-2026-65014)
vulnerability in n8n (CVE-2026-65014). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.27.4` or later.
|
| CVE-2026-65015 |
|
Authorization Flaw in n8n (CVE-2026-65015)
vulnerability in n8n (CVE-2026-65015). Successful exploitation can lead to full system takeover. Exploitable via ``agents``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-61390 |
|
Vulnerability in CVE-2026-61390 (CVE-2026-61390)
vulnerability in CVE-2026-61390 (CVE-2026-61390). Data can be tampered with by attackers.
|
| CVE-2026-65593 |
|
SSRF (Server-Side Request Forgery) in n8n (CVE-2026-65593)
SSRF in n8n (CVE-2026-65593). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-57599 |
|
Privilege Escalation in privilege-escalation (CVE-2026-57599)
vulnerability in privilege-escalation (CVE-2026-57599). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65016 |
|
Vulnerability in n8n (CVE-2026-65016)
vulnerability in n8n (CVE-2026-65016). Successful exploitation can lead to full system takeover. Exploitable via ``N8N_SSO_SCOPES_PROVISION_INSTANCE_ROLE``. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-57600 |
|
Vulnerability in CVE-2026-57600 (CVE-2026-57600)
vulnerability in CVE-2026-57600 (CVE-2026-57600). Confidential information can be exposed externally.
|
| CVE-2026-61392 |
|
Information Disclosure in CVE-2026-61392 (CVE-2026-61392)
vulnerability in CVE-2026-61392 (CVE-2026-61392). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-65595 |
|
Privilege Escalation in n8n (CVE-2026-65595)
vulnerability in n8n (CVE-2026-65595). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65594 |
|
Authorization Flaw in n8n (CVE-2026-65594)
vulnerability in n8n (CVE-2026-65594). Confidential information can be exposed externally. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65591 |
|
Vulnerability in n8n (CVE-2026-65591)
vulnerability in n8n (CVE-2026-65591). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-65589 |
|
Vulnerability in n8n (CVE-2026-65589)
vulnerability in n8n (CVE-2026-65589). Confidential information can be exposed externally. Mitigation: upgrade to `2.29.8` or later.
|
| CVE-2026-61391 |
|
Vulnerability in CVE-2026-61391 (CVE-2026-61391)
vulnerability in CVE-2026-61391 (CVE-2026-61391). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44189 |
|
Vulnerability in CVE-2026-44189 (CVE-2026-44189)
vulnerability in CVE-2026-44189 (CVE-2026-44189). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4773 |
|
Vulnerability in CVE-2026-4773 (CVE-2026-4773)
vulnerability in CVE-2026-4773 (CVE-2026-4773). Confidential information can be exposed externally.
|
| CVE-2026-44192 |
|
Path Traversal in path-traversal (CVE-2026-44192)
path traversal in path-traversal (CVE-2026-44192). Confidential information can be exposed externally.
|
| CVE-2026-44190 |
|
OS Command Injection in CVE-2026-44190 (CVE-2026-44190)
OS command injection in CVE-2026-44190 (CVE-2026-44190). Successful exploitation can lead to full system takeover. Exploitable via ``ansible.python.activationScript``.
|
| CVE-2025-13146 |
|
Code Injection in wordpress (CVE-2025-13146)
code injection in wordpress (CVE-2025-13146). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16544 |
|
Vulnerability in CVE-2026-16544 (CVE-2026-16544)
vulnerability in CVE-2026-16544 (CVE-2026-16544). Confidential information can be exposed externally.
|
| CVE-2026-44187 |
|
Vulnerability in CVE-2026-44187 (CVE-2026-44187)
vulnerability in CVE-2026-44187 (CVE-2026-44187). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-14551 |
|
Vulnerability in privilege-escalation (CVE-2026-14551)
vulnerability in privilege-escalation (CVE-2026-14551). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16473 |
|
Out-of-Bounds Read in CVE-2026-16473 (CVE-2026-16473)
vulnerability in CVE-2026-16473 (CVE-2026-16473). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-16551 |
|
Vulnerability in CVE-2026-16551 (CVE-2026-16551)
vulnerability in CVE-2026-16551 (CVE-2026-16551). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15787 |
|
Cross-Site Scripting (XSS) in wordpress (CVE-2026-15787)
cross-site scripting in wordpress (CVE-2026-15787). Risk of unauthorized operations or information disclosure.
|