https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:30:13.145532+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380040 EUVD-2026-380040 2026-10-02T15:30:13.206156+00:00 EUVD-2026-380040 https://cve.radiocsirt.org/vuln/fkie_cve-2026-103256 fkie_cve-2026-103256 2026-10-02T15:30:13.206202+00:00

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow username-and-password credentials that sends unencrypted passwords to unvalidated hosts. Attackers with credential update permissions can modify the host field to receive account passwords at arbitrary hosts, bypassing domain validation controls.

 https://cve.radiocsirt.org/vuln/ghsa-6m32-557f-fqq9 GHSA-6m32-557f-fqq9 2026-10-02T15:30:13.206252+00:00

n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow username-and-password credentials that sends unencrypted passwords to unvalidated hosts. Attackers with credential update permissions can modify the host field to receive account passwords at arbitrary hosts, bypassing domain validation controls.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3393 WID-SEC-W-2026-3393 — n8n: Mehrere Schwachstellen 2026-10-02T15:30:13.206297+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder Code auszuführen.