CVE-2026-34754

MantisBT (Mantis Bug Tracker) REST API allows an authenticated user to upload attachments to private issues they are not authorized to access. Affected: version 2.28.1 and earlier; root cause: unauthorized attachment upload via REST API. Impact: potential access/obstruction on private issues due ...

CVE-2026-34754 MantisBT allows unauthorized users to upload attachments to restricted issues via REST API

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.28.1 and prior allow an authenticated user to upload attachments to private Issues they are not authorized to access. This issue has been fixed in version 2.28.2...

Server-side Request Forgery (SSRF)

Overview n8n-core is a Core functionality of n8n Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the POST /rest/dynamic-node-parameters/options endpoint. An attacker can redirect responses to a server under their control by sending a specially crafted...

org.apache.camel.kafkaconnector:camel-cxfrs-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-cxf (4.18.0) +7 more potentially affected by CVE-2026-47323 via org.apache.camel:camel-cxf-rest (>=4.15.0, <=4.18.1)

org.apache.camel:camel-cxf-rest MAVEN version =4.15.0, =4.15.0, =4.15.0, =4.18.1 Source cves: CVE-2026-47323 Source advisory: OSV:GHSA-8364-HFQJ-PWM6...

GHSA-8364-HFQJ-PWM6 Camel-CXF and Camel-Knative Message Header are Vulnerable to Injection via Missing Inbound Filtering

Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...

org.apache.camel.kafkaconnector:camel-cxf-kafka-connector (>=3.18.1, <=3.21.0), org.apache.camel.kafkaconnector:camel-cxfrs-kafka-connector (>=3.18.1, <=4.14.5) +16 more potentially affected by CVE-2026-47323 via org.apache.camel:camel-cxf-rest (>=3.18.0, <=4.14.5)

org.apache.camel:camel-cxf-rest MAVEN version =3.18.0, =3.18.1, =3.18.1, =3.18.1, =3.18.1, =4.7.0, =3.18.0, =4.7.0, =4.10.7, =3.18.0, =3.18.0, =$%7brevision%7d, =8.0.1.r2023-08-rt, =8.0.1.r2023-08-rt, =8.0.1.r2023-08-rt, =$%7brevision%7d, =8.0.1.r2024-05-rt and more Source cves:...

org.apache.camel.kafkaconnector:camel-cxfrs-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-cxf (4.18.0) +7 more potentially affected by CVE-2026-47323 via org.apache.camel:camel-cxf-rest (>=4.15.0, <=4.18.1)

org.apache.camel:camel-cxf-rest MAVEN version =4.15.0, =4.15.0, =4.15.0, =4.18.1 Source cves: CVE-2026-47323 Source advisory: GHSA-8364-HFQJ-PWM6...

org.apache.camel.kafkaconnector:camel-cxf-kafka-connector (>=3.18.1, <=3.21.0), org.apache.camel.kafkaconnector:camel-cxfrs-kafka-connector (>=3.18.1, <=4.14.5) +16 more potentially affected by CVE-2026-47323 via org.apache.camel:camel-cxf-rest (>=3.18.0, <=4.14.5)

org.apache.camel:camel-cxf-rest MAVEN version =3.18.0, =3.18.1, =3.18.1, =3.18.1, =3.18.1, =4.7.0, =3.18.0, =4.7.0, =4.10.7, =3.18.0, =3.18.0, =$%7brevision%7d, =8.0.1.r2023-08-rt, =8.0.1.r2023-08-rt, =8.0.1.r2023-08-rt, =$%7brevision%7d, =8.0.1.r2024-05-rt and more Source cves:...

org.apache.camel.kafkaconnector:camel-cxf-kafka-connector (>=3.18.1, <=3.21.0), org.apache.camel.kafkaconnector:camel-cxfrs-kafka-connector (>=3.18.1, <=4.14.5) +16 more potentially affected by CVE-2026-47323 via org.apache.camel:camel-cxf-rest (>=3.18.0, <=4.14.5)

org.apache.camel:camel-cxf-rest MAVEN version =3.18.0, =3.18.1, =3.18.1, =3.18.1, =3.18.1, =4.7.0, =3.18.0, =4.7.0, =4.10.7, =3.18.0, =3.18.0, =$%7brevision%7d, =8.0.1.r2023-08-rt, =8.0.1.r2023-08-rt, =8.0.1.r2023-08-rt, =$%7brevision%7d, =8.0.1.r2024-05-rt and more Source cves:...

CVE-2026-47323

Apache Camel is vulnerable to message header injection due to missing inbound filtering in the CxfRsHeaderFilterStrategy (camel-cxf-rest), CxfHeaderFilterStrategy (camel-cxf-transport), and KnativeHttpHeaderFilterStrategy (camel-knative-http) components. These implementations only filter outbound...

org.apache.camel.kafkaconnector:camel-cxfrs-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:itests-cxf (4.18.0) +7 more potentially affected by CVE-2026-47323 via org.apache.camel:camel-cxf-rest (>=4.15.0, <=4.18.1)

org.apache.camel:camel-cxf-rest MAVEN version =4.15.0, =4.15.0, =4.15.0, =4.18.1 Source cves: CVE-2026-47323 Source advisory: MEND:CVE-2026-47323...

PT-2026-44914

Impact The ExecuteWorkflow node's localFile source option read workflow files from disk without applying checks enforced by other file-reading nodes. An authenticated user with permission to create or modify workflows could supply an arbitrary file path via the REST API, bypassing the N8N RESTRIC...

PT-2026-44915

Impact The POST /rest/dynamic-node-parameters/options endpoint allowed any authenticated user to cause the n8n server to issue HTTP requests including credentials bypassing the intended restrictions on which hosts could be contacted for that credential Allowed HTTP Request Domains. The user neede...

CVE-2026-47323: Improper Handling of Case Sensitivity

Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilterStrategy in camel-knative-http only...

CVE-2026-8736

A security flaw has been discovered in Oinone Pamirs up to 7.2.0. This vulnerability affects the function request.getParameter of the file LocalFileClient.java of the component RestController. Performing a manipulation of the argument uniqueFileName results in path traversal. The attack may be...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity

CVE-2024-27198 Lab Description TeamCity provides an admin-...

EUVD-2026-30771

Dify version 1.14.1 and prior contain a path traversal vulnerability that allows authenticated users to manipulate requests forwarded to the Plugin Daemon's internal REST API by exploiting insufficient URL path sanitization. Attackers can traverse out of their authorized tenant path using unencod...

CVE-2026-41948

Dify version 1.14.1 and prior contain a path traversal vulnerability that allows authenticated users to manipulate requests forwarded to the Plugin Daemon's internal REST API by exploiting insufficient URL path sanitization. Attackers can traverse out of their authorized tenant path using unencod...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via unvalidated URL processing in the OAuth2 dynamic client registration process. An attacker can access internal network resources or sensitive information by supplying malicious URLs to be fetched by t...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via unvalidated URL processing in the OAuth2 dynamic client registration process. An attacker can access internal network resources or sensitive information by supplying malicious URLs to be fetched by t...