n8n before 1.123.73 Remote Code Execution via Git Node
CVE-2026-85168
n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node
2026-09-04 归档
今日共收录 1362 条安全情报，包含 399 个 CVE，552 篇安全通告，以及 120 篇研究论文。
← 返回归档列表n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement
CVE-2026-85165
n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers in spread, computed
WWBN AVideo Broken Access Control via feed/index.php program_id
CVE-2026-85157
WWBN AVideo contains a broken access control vulnerability in the unauthenticated feed/index.php endpoint that disables
WWBN AVideo Broken Access Control via Channel Page
CVE-2026-85156
WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to
WWBN AVideo SQL Injection via get.json.php APIName channels
CVE-2026-85155
WWBN AVideo contains a SQL injection vulnerability in the sort column parameter of the get.json.php endpoint with APINam
WWBN AVideo Authentication Bypass via Non-Expiring video_id_hash
CVE-2026-85154
WWBN AVideo contains an authentication failure vulnerability where the video_id_hash credential is a non-expiring, non-r
util-linux libmount Privilege Escalation via Failed Mount Helper
CVE-2026-76642
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, al
selinux: reject a class permission count below its inherited common
CVE-2026-80757
In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permission count below its
selinux: do not cancel a policy conversion that never started
CVE-2026-80756
In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy conversion that nev
selinux: reject a permission value exceeding the class permission count
CVE-2026-80755
In the Linux kernel, the following vulnerability has been resolved: selinux: reject a permission value exceeding the cl
Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
CVE-2026-80754
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electro
Input: psxpad-spi - set driver data before use
CVE-2026-80752
In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psx
pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()
CVE-2026-80751
In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prev_o in mtk_m
pmdomain: mediatek: fix remaining %pOF after of_node_put()
CVE-2026-80750
In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after of_nod
drm/connector/hdmi: Fix out of bounds memory read
CVE-2026-80749
In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of bounds memory read
mmc: loongson2: Fix sg iteration in data reorder functions
CVE-2026-80748
In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder fu
drm/amdkfd: Add bounds check for CRAT subtype length
CVE-2026-80747
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype lengt
clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_src RCG stall on Eliza EVK
CVE-2026-80746
In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-eliza: Fix disp_cc_mdss_mdp_clk_s
regulator: fp9931: Fix VPOS/VNEG voltage selector table
CVE-2026-80745
In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix VPOS/VNEG voltage selector t
ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
CVE-2026-80743
In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: pass aud_drv_data to i