Security Operations
Threat Intelligence
🔎
❓

Threat Feed

Normalized, deduplicated intelligence. When several agencies report the same CVE, they are merged into one object showing all reporting sources.
DEMO MODE
HIGH
CVE-2026-118679 - n8n before 1.123.83, 2.41.4, and 2.42.1 contains a server-side request forgery vulnerability in the Slack Trigger webhoo
NEAR-REAL-TIME
CVE-2026-118679 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118678 - n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability that allows low-privileged users
NEAR-REAL-TIME
CVE-2026-118678 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
MEDIUM
CVE-2026-118677 - n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop ap
NEAR-REAL-TIME
CVE-2026-118677 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118676 - n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows member users to use c
NEAR-REAL-TIME
CVE-2026-118676 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118675 - n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows editors of shared w
NEAR-REAL-TIME
CVE-2026-118675 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118649 - n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a client-supplied workflow ID and caches each workflow's owner projec
NEAR-REAL-TIME
CVE-2026-118649 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118648 - n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site scripting vulnerability be
NEAR-REAL-TIME
CVE-2026-118648 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118647 - n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token in error ex
NEAR-REAL-TIME
CVE-2026-118647 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
MEDIUM
CVE-2026-118646 - n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows authen
NEAR-REAL-TIME
CVE-2026-118646 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118645 - n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnerability in the Quick
NEAR-REAL-TIME
CVE-2026-118645 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118644 - n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, including the identity of
NEAR-REAL-TIME
CVE-2026-118644 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118643 - n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error data when
NEAR-REAL-TIME
CVE-2026-118643 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
google
Source ↗
HIGH
CVE-2026-118642 - n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows authenticated members
NEAR-REAL-TIME
CVE-2026-118642 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118641 - n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains an OData $filter injection vulnerability in th
NEAR-REAL-TIME
CVE-2026-118641 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
microsoft
Source ↗
MEDIUM
CVE-2026-118640 - n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub that allows chat-only
NEAR-REAL-TIME
CVE-2026-118640 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
HIGH
CVE-2026-118633 - A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM
NEAR-REAL-TIME
CVE-2026-118633 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
MEDIUM
CVE-2026-118265 - Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's ExtractIPFromRealIPHeader validates whether the client-sup
NEAR-REAL-TIME
CVE-2026-118265 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
INFORMATIONAL
CVE-2026-118264 - Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw tunnel from a clien
NEAR-REAL-TIME
CVE-2026-118264 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
INFORMATIONAL
CVE-2026-118263 - Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's BodyDump middleware can discard a BodyLimit overflow error
NEAR-REAL-TIME
CVE-2026-118263 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗
INFORMATIONAL
CVE-2026-118262 - Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, copy gorou
NEAR-REAL-TIME
CVE-2026-118262 · NIST NVD - National Vulnerability Database · published 2026-10-28T19:17
Source ↗