Resources

Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials

Cybersecurity researchers have disclosed details of two now-patched security flaws in the n8n workflow automation platform, including two critical bugs that could result in arbitrary command execution.
The vulnerabilities are listed below –

CVE-2026-27577 (CVSS score: 9.4) – Expression sandbox escape leading to remote code execution (RCE)
CVE-2026-27493 (CVSS score: 9.5) – Unauthenticated

Related resources

19 December 2025

Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers

A suspected Russia-aligned group has been attributed to a phishing campaign that employs device code authentication workflows to steal victims’ Microsoft 365 credentials and conduct account takeover attacks. The activity, […]

23 July 2026

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra’s webmail client. The payload goes after the last 90 days of email, the organization’s […]

9 January 2026

China-Linked Hackers Exploit VMware ESXi Zero-Days to Escape Virtual Machines

Chinese-speaking threat actors are suspected to have leveraged a compromised SonicWall VPN appliance as an initial access vector to deploy a VMware ESXi exploit that may have been developed as […]

Canada Needs Nationalized, Public AI

Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker

Resources

Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials

Related resources

Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

China-Linked Hackers Exploit VMware ESXi Zero-Days to Escape Virtual Machines

Links

Enterprise Solutions

SMB Solutions

Contact Us

Follow Us