Alta
CVE-2026-65591
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 177
Restablecer filtros
Media
CVE-2026-65593
n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access
Alta
CVE-2026-65595
n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs
Alta
CVE-2026-59208
n8n: Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
Alta
CVE-2026-59207
n8n: "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
Alta
CVE-2026-59206
n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration
Alta
CVE-2026-59209
n8n: Shared Credential Header Leak via HTTP Request Pagination Expression
Media
CVE-2026-65599
n8n: Google Service Account Private Key Exposed in JWT Header
Alta
CVE-2026-65592
n8n: Stored DOM XSS via Resource Locator `cachedResultUrl`
Alta
CVE-2026-65597
n8n: DOM-Based XSS via Unsandboxed iframe srcdoc in HTML Preview
Alta
CVE-2026-65598
n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
Alta
CVE-2026-65015
n8n: AI Agents Project Viewer Privilege Escalation via run_node_tool
Media
CVE-2026-55608
n8n-MCP: Incorrect authorization can expose default-scope workflow version backups in multi-tenant HTTP mode
Crítica
CVE-2026-54052
n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments
Alta
CVE-2026-49357
Streamable HTTP mode exposes LINE Desktop read/send tools without MCP authentication
Alta
CVE-2026-54353
@budibase/backend-core has potential SSRF DNS rebinding bypass in outbound fetch validation
Media
CVE-2026-56775
n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints
Alta
CVE-2026-54304
n8n: SecurityScorecard Node Leaks API Token to User-Controlled Host
Alta
CVE-2026-54309
n8n: MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions
Alta
CVE-2026-54305
n8n: Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints
Alta
CVE-2026-54307
n8n: Credential Exfiltration via Permission Bypass
Media
CVE-2026-54314
n8n: Denial of Service via ZIP decompression in webhook workflow
Media
CVE-2026-56778
n8n: Public API Execution Retry Authorization Bypass
Media
CVE-2026-56777
n8n: Python Code Node AST Validator Bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.