Improper input validation in N8n
CVSS Skor
10.0
EPSS İhtimal
%78.2
Risk Skoru
7.8
Yayın
9 ay önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Nuclei: n8n Webhooks - Remote Code Execution
Giangdurian/CVE-2026-21858-and-CVE-2025-68613
Proof-of-concept exploit for CVE-2026-21858 (ni8mare) impacting n8n versions < 1.121.0
CVE-2026-21858 + CVE-2025-68613 — n8n unauthenticated file read to RCE exploit
Proof of Concept: CVE-2026-21858 is vulnerability on n8n where unauthenticated remote attackers can access sensitive files.
🛡️ Official AI Security Tool module for CVE-2026-21858 + CVE-2025-68613 (n8n "Ni8mare" Unauthenticated Arbitrary File Read & Expression Injection RCE Full Chain).
https://www.cyera.com/research-labs/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858
İlgili Benzer Açıklar
Vulnerability in N8n
Vulnerability in N8n
Code injection in N8n
n8n before 2.34.1 Remote Code Execution via Path Traversal
Code injection in N8n
n8n before 1.123.67 Remote Code Execution via Git node
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-21858"