https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:46:54.351852+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335678 EUVD-2026-335678 2026-10-04T13:46:54.376067+00:00 EUVD-2026-335678 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56354 fkie_cve-2026-56354 2026-10-04T13:46:54.376102+00:00

n8n before 1.123.24, 2.10.4, and 2.12.0 (across its 1.x and 2.x branches) contains cross-site scripting and open redirect vulnerabilities in the Form Node due to unsanitized HTML description fields and overly permissive iframe sandbox policies. Authenticated users with workflow creation permissions can inject malicious scripts or redirect parameters to perform stored XSS attacks or phishing redirects against end users.

 https://cve.radiocsirt.org/vuln/ghsa-qmq2-xjjf-5ffp GHSA-qmq2-xjjf-5ffp 2026-10-04T13:46:54.376136+00:00

n8n before 1.123.24, 2.10.4, and 2.12.0 (across its 1.x and 2.x branches) contains cross-site scripting and open redirect vulnerabilities in the Form Node due to unsanitized HTML description fields and overly permissive iframe sandbox policies. Authenticated users with workflow creation permissions can inject malicious scripts or redirect parameters to perform stored XSS attacks or phishing redirects against end users.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0877 WID-SEC-W-2026-0877 — n8n: Mehrere Schwachstellen 2026-10-04T13:46:54.376153+00:00

Ein Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um erweiterte Privilegien, einschließlich Administratorrechte, zu erlangen, um beliebigen Code auszuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder Cross-Site- und Man-in-the-Middle-Angriffe durchzuführen.