CVE-2026-44791 — Critical vulnerability brief
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or…
Tag: critical
CVE-2026-49468 — Critical vulnerability brief
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, This vulnerability is…
CVE-2026-48137 — Critical vulnerability brief
There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an…
CVE-2026-55203 — Critical vulnerability brief
HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse…
CVE-2026-8024 — Critical vulnerability brief
A remote, unauthenticated attacker may exploit a deserialization of untrusted data vulnerability in ibaPDA or ibaDatCoordinator to gain full access to the…
CVE-2026-32966 — Critical vulnerability brief
DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2.…
CVE-2026-32967 — Critical vulnerability brief
Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade…
CVE-2026-0126 — Critical vulnerability brief
In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code…
CVE-2026-12293 — Critical vulnerability brief
Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.