https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:55:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-380239 EUVD-2026-380239 https://cve.radiocsirt.org/vuln/euvd-2026-380239 https://cve.radiocsirt.org/vuln/fkie_cve-2026-103253 <p>n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node&#39;s Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute DDL or DML commands against the connected database with the credential&#39;s privileges.</p> <p>n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node&#39;s Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute DDL or DML commands against the connected database with the credential&#39;s privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-103253 https://cve.radiocsirt.org/vuln/ghsa-4p39-vh7m-r689 <p>n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node&#39;s Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute DDL or DML commands against the connected database with the credential&#39;s privileges.</p> <p>n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node&#39;s Delete Table Drop operation. Attackers can inject single quotes in the table or schema fields to append arbitrary SQL statements and execute DDL or DML commands against the connected database with the credential&#39;s privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-4p39-vh7m-r689 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3393 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder Code auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in n8n ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3393