Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:08:36 +0000 CVE-2026-56360 — n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger https://cve.radiocsirt.org/vuln/cve-2026-56360 <p><strong>Affected:</strong> n8n</p> <p>n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data.</p> <p><strong>Affected:</strong> n8n</p> <p>n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data.</p> https://cve.radiocsirt.org/vuln/cve-2026-56360