59026 matches found
CVE-2026-56761
creationtimestamp| type| source ---|---|--- 2026-06-24 14:11:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp23unyhat2i...
CVE-2026-56270
creationtimestamp| type| source ---|---|--- 2026-06-24 13:55:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp22xcos3g2f 2026-07-10 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqbxdatcfq26 2026-08-17 09:00:27+00:00| exploited|...
EUVD-2026-38754
n8n before 1.123.25 1.x and before 2.11.2 2.x, with the fix also included in 2.12.0, contains a stored cross-site scripting vulnerability in the Form Trigger node's CSS sanitization that allows authenticated users to inject malicious scripts. Attackers with workflow creation permissions can injec...
CVE-2026-56351 n8n - SQL Injection in MySQL, PostgreSQL, and Microsoft SQL Nodes
n8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and Microsoft SQL nodes that allows authenticated users to inject arbitrary SQL through unescaped identifier values in node configuration parameters. Attackers with workflow creation permissions can supply...
CVE-2026-56358
n8n before 1.123.25 1.x and before 2.11.2 2.x, with the fix also included in 2.12.0, contains a stored cross-site scripting vulnerability in the Form Trigger node's CSS sanitization that allows authenticated users to inject malicious scripts. Attackers with workflow creation permissions can injec...
CVE-2026-56351
n8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and Microsoft SQL nodes that allows authenticated users to inject arbitrary SQL through unescaped identifier values in node configuration parameters. Attackers with workflow creation permissions can supply...
CVE-2026-52936
creationtimestamp| type| source ---|---|--- 2026-06-24 10:36:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozptg2oal2m...
CVE-2026-52927
creationtimestamp| type| source ---|---|--- 2026-06-24 10:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozoqr7m7c2m 2026-07-01 02:47:14+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:24:36+00:00| seen|...
CVE-2026-52932
creationtimestamp| type| source ---|---|--- 2026-06-24 10:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozo6s6jhj2y...
CVE-2026-9721
creationtimestamp| type| source ---|---|--- 2026-06-24 09:16:24+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mozle7e7yj2q...
CVE-2022-28206
creationtimestamp| type| source ---|---|--- 2026-06-24 07:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moze4zc3pd2n...
CVE-2026-12849
creationtimestamp| type| source ---|---|--- 2026-06-24 06:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozbycv5rt25...
CVE-2026-54515
creationtimestamp| type| source ---|---|--- 2026-06-24 00:39:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moyoilsxlk2y 2026-06-29 13:58:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgnhh3jnf2d...
EUVD-2026-38636
Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission...
CVE-2026-12164
creationtimestamp| type| source ---|---|--- 2026-06-24 00:05:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moymkmpneg2f...
CVE-2026-54518
creationtimestamp| type| source ---|---|--- 2026-06-24 00:02:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moymgidgrg2f...
CVE-2026-50193
creationtimestamp| type| source ---|---|--- 2026-06-23 23:51:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moylsm4iin2j...
Snipe-IT Vulnerable to Privilege Escalation via Missing admin Permission Check in User Creation
Impact The store method in both the web and API UsersController only strips the superuser permission when a non-superuser creates a user. It does not strip the admin permission. This allows any authenticated user with the users.create permission to create a new user with full admin privileges. Th...
GHSA-HF68-G98V-WP9G Snipe-IT Vulnerable to Privilege Escalation via Missing admin Permission Check in User Creation
Impact The store method in both the web and API UsersController only strips the superuser permission when a non-superuser creates a user. It does not strip the admin permission. This allows any authenticated user with the users.create permission to create a new user with full admin privileges. Th...