n8n Vulnerable to XSS via MCP OAuth client
CVE-2026-42235
## Impact An unauthenticated attacker could register a malicious MCP OAuth client with a crafted `client_name`. If a vic
#severity:high
共收录 5513 条相关情报。
← 返回所有主题n8n's Credential Authorization Bypass in dynamic-node-parameters Allows Foreign API Key Replay
CVE-2026-42226
## Impact The `dynamic-node-parameters` endpoints did not verify whether the authenticated caller was authorized to use
n8n has a Python Task Runner Sandbox Escape Vulnerability
CVE-2026-42234
## Impact An authenticated user with permission to create or modify workflows containing a Python Code Node could escape
n8n Vulnerable to Unauthenticated Denial of Service via MCP Client Registration
CVE-2026-42236
## Impact The MCP OAuth client registration endpoint accepted unauthenticated requests and stored client data without ad
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
CVE-2026-42646
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPr
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-42652
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Reg
Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to...
CVE-2026-42249
Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of at
Ollama for Windows does not perform integrity or authenticity verification of downloaded update...
CVE-2026-42248
Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables. Unlike othe
This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded...
CVE-2026-42518
This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in c
This vulnerability exists in e-Sushrut due to improper access control in resource access...
CVE-2026-42515
This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated at
This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for...
CVE-2026-42517
This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An au
This vulnerability exists in e-Sushrut due to improper authorization checks during resource...
CVE-2026-42516
This vulnerability exists in e-Sushrut due to improper authorization checks during resource access. An authenticated att
This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client...
CVE-2026-42513
This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response paramete
This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses....
CVE-2026-42514
This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses. A remote attacker coul
Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting...
CVE-2026-42377
Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Co
Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected...
CVE-2026-35155
Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race
GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe...
CVE-2026-42615
GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3
mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a...
CVE-2026-42167
mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a username, in scenarios where
CoreDNS has TSIG authentication bypass on gRPC and QUIC transports
CVE-2026-35579
### Summary The gRPC, QUIC, DoH, and DoH3 transports in CoreDNS incorrectly handle TSIG authentication. For gRPC and Q
CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPC
CVE-2026-33190
### Summary CoreDNS' tsig plugin can be bypassed on non-plain-DNS transports because it trusts the transport writer's Ts