https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:37:20.997320+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331797 EUVD-2026-331797 2026-10-05T20:37:21.001079+00:00 EUVD-2026-331797 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56350 fkie_cve-2026-56350 2026-10-05T20:37:21.001119+00:00

n8n before 2.8.0 contains an authentication bypass vulnerability allowing authenticated SSO users to disable SSO enforcement through the API. Attackers can create local password credentials to authenticate directly, bypassing organizational SSO policies and identity-provider-enforced multi-factor authentication.

 https://cve.radiocsirt.org/vuln/ghsa-j7c2-5x6r-g9w8 GHSA-j7c2-5x6r-g9w8 2026-10-05T20:37:21.001153+00:00

n8n before 2.8.0 contains an authentication bypass vulnerability allowing authenticated SSO users to disable SSO enforcement through the API. Attackers can create local password credentials to authenticate directly, bypassing organizational SSO policies and identity-provider-enforced multi-factor authentication.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0248 NCSC-2026-0248 — Kwetsbaarheden verholpen in n8n workflow automation platform 2026-10-05T20:37:21.001171+00:00 NCSC-2026-0248 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0532 WID-SEC-W-2026-0532 — n8n: Mehrere Schwachstellen 2026-10-05T20:37:21.001204+00:00

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um Daten zu manipulieren, um einen SQL-Injection Angriff durchzuführen, und um einen Cross-Site Scripting Angriff durchzuführen.