Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 6.1 CVE-2026-48520

Langflow: Unauthenticated Shareable Playground arbitrary local or S3 file read_CVE-2026-48520

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.10.0, the "Shareable Playground" (or "Public Flows" in co...

langflow-ai langflow < 1.10.0 CVE
CRITICAL 9.6 CVE-2026-48519

Langflow: Unauthenticated RCE in Shareable Playgrounds_CVE-2026-48519

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" (or "Public Flows" in cod...

langflow-ai langflow < 1.9.2 CVE
HIGH 8.3 CVE-2026-45732

n8n: Cross-user Authorization Bypass in Dynamic Credential OAuth Endpoints_CVE-2026-45732

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth1 and OAuth2 credential reconnect endpoints aut...

n8n-io n8n < 1.123.43 CVE
HIGH 8.8 CVE-2026-44959

CVE-2026-44959_CVE-2026-44959

A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 and earlier. A low‑privileged user could add an...

Revive Adserver CVE
MEDIUM 5.4 CVE-2026-44958

CVE-2026-44958_CVE-2026-44958

An access control bypass allows an advertiser‑level user to activate or deactivate a banner in Revive Adserver 6.0.6 and earlier, even when such pe...

Revive Adserver CVE
MEDIUM 4.3 CVE-2026-44957

CVE-2026-44957_CVE-2026-44957

A missing access control check when invoking various modify methods in the XML‑RPC API of Revive Adserver 6.0.6 and earlier. The API allowed entiti...

Revive Adserver CVE
HIGH 8.9 CVE-2026-44792

n8n: Source Control Pull SQL Injection_CVE-2026-44792

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access to the git repository conn...

n8n-io n8n < 1.123.43 CVE
CRITICAL 9.4 CVE-2026-44791

n8n: XML Node Prototype Pollution Patch Bypass_CVE-2026-44791

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modif...

n8n-io n8n < 1.123.43 CVE
CRITICAL 9.4 CVE-2026-44790

n8n: Arbitrary File Read via Git Node_CVE-2026-44790

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modif...

n8n-io n8n < 1.123.43 CVE
CRITICAL 9.4 CVE-2026-44789

n8n: HTTP Request Node Pagination Prototype Pollution to RCE_CVE-2026-44789

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modif...

n8n-io n8n < 1.123.43 CVE