19 matches found
CVE-2026-108710
NornicDB versions through 1.4.1 are vulnerable to a missing authorization flaw (CWE-862) affecting the /nornicdb/search and /nornicdb/similar endpoints. This vulnerability allows authenticated users with a viewer-role —who are allowlisted for a database but explicitly denied read permissions—to b...
CVE-2026-103254
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in signed resume URL generation for Send-and-Wait approvals. Attackers with workflow creation permissions can mint valid approval URLs for gates in projects they cannot...
CVE-2026-103247
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to...
CVE-2026-103247
Versions of n8n before 1.123.80 are vulnerable to a credential tampering flaw caused by duplicate node IDs . Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to bypass the workflow credential tamper guard. This allows the attacker to retain victim ...
CVE-2026-103247 n8n before 1.123.80 Credential Tampering via Duplicate Node IDs
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to...
EUVD-2026-90751
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to...
CVE-2026-103247 n8n before 1.123.80 Credential Tampering via Duplicate Node IDs
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to...
CVE-2026-103247 n8n before 1.123.80 Credential Tampering via Duplicate Node IDs
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to...
CVE-2026-103247: Authorization Bypass Through User-Controlled Key
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to...
PT-2026-103787
Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.80 n8n versions 2.0.0 through 2.39.5 n8n versions 2.40.0 Description A path traversal issue exists in the signed resume URL generation for Send-and-Wait approvals. Users with workflow creation permissions can forge...
PT-2026-103780
n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to...
PT-2026-98643
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the ice driver due to a missing call to the xa destroy function for the sched node ids xarray. The xarray was added to the port info structure but was not properl...
CVE-2026-74384
A flaw was found in the Linux kernel's nvme-multipath component. This vulnerability arises from an incorrect calculation of a flexible array size, currentpath, which is indexed using Non-Uniform Memory Access NUMA node IDs. On certain architectures, such as powerpc, NUMA node IDs can be sparse,...
CVE-2025-38677 f2fs: fix to avoid out-of-boundary access in dnode page
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming Zhang reported: dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x1c1/0x2a0 lib/dumpstack.c:120 printaddressdescription mm/kasan/report.c:378 inline...
Code injection
The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permissions. This occurs because node IDs are predictable with incrementing numbers and the access control on...
CVE-2021-28674: Use of Insufficiently Random Values
The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permissions. This occurs because node IDs are predictable with incrementing numbers and the access control on...
PT-2021-17897
Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform versions prior to 2020.2.5 HF1 Description: The node management page in SolarWinds Orion Platform allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permission...
