Analysis

CVE-2026-9265 affects Crypt::OpenSSL::PKCS12 for Perl before version 1.96, where a heap out-of-bounds read can occur in the UTF8STRING handling of print_attribute. The record rates it critical with a CVSS 3.1 base score of 9.1, and no confirmed exploitation appears in the sources consulted. The referenced 1.96 release notes and commit patch point to upgrading as the main remediation path.

CVE-2026-44791 affects the n8n workflow automation platform in the version ranges listed in the record, which are fixed in 1.123.43, 2.22.1 and 2.20.7. According to the record, an authenticated user allowed to create or modify workflows could bypass the earlier fix for CVE-2026-42232 in the XML node, and combined with other nodes this could lead to remote code execution on the n8n host. The record rates it critical with an NVD CVSS 3.1 score of 9.9, and no confirmed exploitation appears in the sources consulted.

CVE-2026-56348 affects n8n versions before 2.20.0 and allows authenticated users to bypass the Allowed HTTP Request Domains restriction through the POST /rest/dynamic-node-parameters/options endpoint. The record describes a path that can lead the n8n server to send credentials to unauthorized hosts. NVD lists a CVSS 3.1 base score of 9.9 (critical), while the record shows no confirmed exploitation in the sources consulted.

Claude Code versions from 0.2.54 up to, but not including, 2.1.163 pre-approved the bare hostname huggingface.co for the WebFetch tool, so any path on that domain was auto-approved, including attacker-controlled model repositories. An attacker able to inject untrusted content into a Claude Code context could use this to create a covert channel for exfiltrating data the tool can access. The record states the issue is fixed in version 2.1.163.

CVE-2026-9006 is a server-side request forgery (CWE-918) in IBM WebSphere Application Server 9.0 and 8.5 when the Ajax Proxy is configured. NVD scores it 9.1 (CVSS 3.1, Critical), while IBM's PSIRT scores it 7.4. No confirmed exploitation appears in the sources consulted, and the record lists no fixed versions, so administrators should check IBM's advisory directly.

Traefik releases before 3.7.3, 3.6.18 and 2.11.51 can let unauthenticated clients bypass router-specific mTLS when HTTP/3 is enabled on an entrypoint. The TLS configuration lookup on SNI is exact and case-sensitive, so wildcard and case-variant hostnames fall back to a default configuration that may not require client certificates. The record rates the issue critical and classifies it as CWE-288; the sources consulted do not confirm exploitation in the wild.

CVE-2026-44939 affects Rancher Manager versions before 2.14.2, where the cluster import endpoint does not sanitize YAML parameters, enabling command injection. According to the CNA's CVSS v4.0 score of 9.4, a remote attacker could potentially escape an image context and run malicious containers. The record shows no confirmed exploitation in the sources consulted, and the affected and fixed product fields are empty.

An untrusted pointer dereference in the NI grpc-device sideband streaming API may allow an attacker to cause an arbitrary memory dereference, potentially leading to remote code execution. Exploitation requires a specially crafted Moniker protobuf message, and NVD scores the issue 9.8 under CVSS 3.1. No confirmed exploitation appears in the sources consulted, and the record lists no fixed version.

CVE-2026-12866 affects the expr-eval JavaScript package, where the toJSFunction() API can turn user-supplied expressions into native code through new Function(). The record rates it critical, with a CVSS 3.1 score of 9.8 and a CVSS 4.0 score of 9.2 from Snyk, and classifies it as CWE-94 (code injection). It is not listed in CISA KEV, and no confirmed exploitation appears in the sources consulted.

CVE-2026-7515 affects the BetterDocs Pro plugin for WordPress in versions up to and including 3.8.0, through the doc_style parameter. The record describes a Local File Inclusion issue that can be reached without authentication and carries a CVSS 3.1 base score of 9.8 from the CNA Wordfence. No confirmed exploitation appears in the sources consulted, and the record lists no fixed version.

vLLM versions from 0.3.0 up to (but not including) 0.22.0 contain an authentication bypass in the OpenAI API AuthenticationMiddleware, which can allow requests without the configured API key. The record rates it critical with a CVSS 3.1 base score of 9.1 and states that it is fixed in 0.22.0. No confirmed exploitation appears in the sources consulted.

LobeHub versions before 2.1.57 expose the /webapi/proxy endpoint on app.lobehub.com, which fetches a URL from the POST body on the server side (CWE-918, Server-Side Request Forgery). The GitHub CNA scores the issue as critical with CVSS 3.1 base score 9.0, and the record states it is fixed in 2.1.57. The CISA KEV catalog does not list it and no confirmed exploitation appears in the sources consulted.

CVE-2026-54310 is an SQL injection flaw in the TimescaleDB and legacy Postgres v1 nodes of the n8n workflow automation platform. An authenticated user who can create or modify workflows may be able to run arbitrary SQL against the connected database, with the privileges of the configured database account. The vendor fixed the issue in versions 2.25.7 and 2.26.2.

IBM disclosed CVE-2026-10561 in Langflow OSS versions 1.0.0 through 1.9.3, describing improper isolation of Python execution combined with an authentication bypass. According to the record, an unauthenticated attacker could execute arbitrary code on the host, and the CNA scored it 10 under CVSS 3.1. The sources consulted show no fixed version listed in the record and no confirmed exploitation.

The @n8n/mcp-browser package of n8n, when run with the HTTP transport, exposes an MCP endpoint that accepts session initialization and tool calls without authentication, a weakness classified as CWE-306. Where the n8n AI Browser Bridge extension is installed and connected, an unauthenticated caller could reach browser-control functions on the user's real browser profile. The vendor fixes are in versions 2.25.7 and 2.26.2, and the record shows no CISA KEV listing.