CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2026-18639

When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. However, some IdP allow users to change the email claim without verification. Some IdPs do not set the "emailverified" claim and do not actually verify the email. This allows a user to...

CVE-2026-18639

CVE-2026-18639 affects Velociraptor's OIDC authenticator. The vulnerability arises when Velociraptor uses the email claim as a username; some IdPs allow changing the email without verification, and some do not set or verify the email_verified claim. This can enable a user to impersonate another b...

CVE-2026-18639 Velociraptor OIDC Authenticator susceptible to email spoofing

When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. However, some IdP allow users to change the email claim without verification. Some IdPs do not set the "emailverified" claim and do not actually verify the email. This allows a user to...

CVE-2026-18639 Velociraptor OIDC Authenticator susceptible to email spoofing

When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. However, some IdP allow users to change the email claim without verification. Some IdPs do not set the "emailverified" claim and do not actually verify the email. This allows a user to...

SonicWall Email Security Affected By Multiple Vulnerabilities

1 CVE-2026-66149 - Improper Control of Generation of Code 'Code Injection' Vulnerability via netmaskImproper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restrict...

CVE-2026-72772

n8n before 2.32.1 and before 2.31.5 is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was verified, nor that the trusted key's...

CVE-2026-72766

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

EUVD-2026-56098

n8n before 2.32.1 and before 2.31.5 is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was verified, nor that the trusted key's...

CVE-2026-72772

n8n before 2.32.1 and before 2.31.5 is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was verified, nor that the trusted key's...

CVE-2026-72766

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

CVE-2026-72766 n8n before 1.123.67 Arbitrary File Read via Send Email Node

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

CVE-2026-72766

n8n contains a type confusion in the Send Email node that can read arbitrary local files and trigger SSRF. Affected versions: n8n before 1.123.67, n8n 2.x before 2.31.5, and n8n 2.32.x before 2.32.1. The issue arises when non‑string values are fed into the node’s text or HTML body and interpreted...

CVE-2026-72766 n8n before 1.123.67 Arbitrary File Read via Send Email Node

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

EUVD-2026-56145

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

CVE-2026-72766 n8n before 1.123.67 Arbitrary File Read via Send Email Node

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

WordPress < 7.0.3 - Email Confirmation Bypass vulnerability

Email Confirmation Bypass vulnerability discovered by 0ways in WordPress core versions 7.0.3...

PT-2026-70908

Name of the Vulnerable Software and Affected Versions SonicWall Email Security affected versions not specified Description An authenticated attacker with access to the restricted CLI can perform a local privilege escalation by injecting arbitrary OS commands that execute with root privileges. Thi...

PT-2026-70909

Name of the Vulnerable Software and Affected Versions SonicWall Email Security affected versions not specified Description An improper control of code generation allows an authenticated attacker with access to the restricted CLI to perform a local privilege escalation. By injecting arbitrary OS...

PT-2026-70168

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...