2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
61 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-86083 N8n | HIGH7.7 | N8n | CWE-94 Code Injection | 0.7% | Sep 8, 2026 |
| CVE-2026-86076 N8n | HIGH8.7 | N8n | CWE-94 Code Injection | 0.8% | Sep 8, 2026 |
| CVE-2026-86075 N8n | HIGH8.7 | N8n | CWE-770 Allocation Without Limits | 0.6% | Sep 8, 2026 |
| CVE-2026-85169 N8n | HIGH8.7 | N8n | CWE-94 Code Injection | 0.9% | Sep 3, 2026 |
| CVE-2026-85168 N8n | HIGH7.7 | N8n | CWE-78 OS Command Injection | 0.8% | Sep 3, 2026 |
| CVE-2026-85165 N8n | HIGH7.2 | N8n | CWE-95 | 0.6% | Sep 3, 2026 |
| CVE-2026-77084 N8n | HIGH7.7 | N8n | CWE-78 OS Command Injection | 0.7% | Aug 20, 2026 |
| CVE-2026-77080 N8n | HIGH8.7 | N8n | CWE-78 OS Command Injection | 0.6% | Aug 20, 2026 |
| CVE-2026-77079 N8n | HIGH7.4 | N8n | CWE-639 Insecure Direct Object Reference | 0.5% | Aug 20, 2026 |
| CVE-2026-77077 N8n | HIGH7.2 | N8n | CWE-94 Code Injection | 0.6% | Aug 20, 2026 |
| CVE-2026-77075 N8n | HIGH8.4 | N8n | CWE-94 Code Injection | 0.5% | Aug 20, 2026 |
| CVE-2026-77072 N8n | HIGH8.4 | N8n | CWE-79 Cross Site Scripting | 0.3% | Aug 20, 2026 |
| CVE-2026-77071 N8n | HIGH7.1 | N8n | CWE-89 SQL Injection | 0.6% | Aug 20, 2026 |
| CVE-2026-77070 N8n | HIGH7.1 | N8n | CWE-943 | 0.5% | Aug 20, 2026 |
| CVE-2026-77068 N8n | HIGH8.7 | N8n | CWE-22 Path Traversal | 0.9% | Aug 20, 2026 |
| CVE-2026-72772 N8n | HIGH8.9 | N8n | CWE-640 | 0.4% | Aug 11, 2026 |
| CVE-2026-72767 N8n | HIGH8.7 | N8n | CWE-78 OS Command Injection | 0.9% | Aug 11, 2026 |
| CVE-2026-72766 N8n | HIGH8.2 | N8n | CWE-843 | 0.4% | Aug 11, 2026 |
| CVE-2026-72765 N8n | HIGH8.7 | N8n | CWE-94 Code Injection | 0.9% | Aug 11, 2026 |
| CVE-2026-72762 N8n | HIGH7.7 | N8n | CWE-434 Unrestricted File Upload | 0.5% | Aug 11, 2026 |
| CVE-2026-65598 N8n | HIGH8.9 | N8n | CWE-367 | 0.3% | Jul 22, 2026 |
| CVE-2026-65595 N8n | HIGH8.9 | N8n | CWE-269 Improper Privilege Management | 0.7% | Jul 22, 2026 |
| CVE-2026-65591 N8n | HIGH8.9 | N8n | CWE-917 | 0.7% | Jul 22, 2026 |
| CVE-2026-65016 N8n | HIGH7.7 | N8n | CWE-639 Insecure Direct Object Reference | 0.4% | Jul 22, 2026 |
| CVE-2026-65015 N8n | HIGH7.2 | N8n | CWE-863 Incorrect Authorization | 0.6% | Jul 22, 2026 |
| CVE-2026-59206 N8n | HIGH7.1 | N8n | CWE-1321 Prototype Pollution | 0.7% | Jul 9, 2026 |
| CVE-2026-54307 N8n | HIGH8.5 | N8n | CWE-863 Incorrect Authorization | 0.4% | Jun 23, 2026 |
| CVE-2026-54305 N8n | HIGH8.9 | N8n | CWE-200 Information Exposure | 0.4% | Jun 23, 2026 |
| CVE-2026-54304 N8n | HIGH7.1 | N8n | CWE-200 Information Exposure | 0.4% | Jun 23, 2026 |
| CVE-2026-49444 N8n | HIGH7.1 | N8n | CWE-20 Improper Input Validation | 0.4% | Jun 23, 2026 |
| CVE-2026-45732 N8n | HIGH8.3 | N8n | CWE-639 Insecure Direct Object Reference | 0.4% | Jun 23, 2026 |
| CVE-2026-44792 N8n | HIGH8.9 | N8n | CWE-89 SQL Injection | 0.4% | Jun 23, 2026 |
| CVE-2026-44791 N8n | CRITICAL9.4 | N8n | CWE-1321 Prototype Pollution | 0.5% | Jun 23, 2026 |
| CVE-2026-44790 N8n | CRITICAL9.4 | N8n | CWE-88 | 0.5% | Jun 23, 2026 |
| CVE-2026-44789 N8n | CRITICAL9.4 | N8n | CWE-1321 Prototype Pollution | 0.5% | Jun 23, 2026 |
| CVE-2026-54312 N8n | HIGH7.2 | N8n | CWE-1321 Prototype Pollution | 0.4% | Jun 23, 2026 |
| CVE-2026-54309 N8n | HIGH8.8 | N8n | CWE-306 Missing Authentication | 0.5% | Jun 23, 2026 |
| CVE-2026-42236 N8n | HIGH8.7 | N8n | CWE-770 Allocation Without Limits | 0.7% | May 4, 2026 |
| CVE-2026-42235 N8n | HIGH8.8 | N8n | CWE-79 Cross Site Scripting | 0.5% | May 4, 2026 |
| CVE-2026-42234 N8n | HIGH7.1 | N8n | CWE-94 Code Injection | 0.7% | May 4, 2026 |
| CVE-2026-42232 N8n | CRITICAL9.4 | N8n | CWE-1321 Prototype Pollution | 0.5% | May 4, 2026 |
| CVE-2026-42231 N8n | CRITICAL9.4 | N8n | CWE-1321 Prototype Pollution | 0.8% | May 4, 2026 |
| CVE-2026-42226 N8n | HIGH7.1 | N8n | CWE-862 Missing Authorization | 0.4% | May 4, 2026 |
| CVE-2026-33713 N8n | HIGH8.7 | N8n | CWE-89 SQL Injection | 0.5% | Mar 25, 2026 |
| CVE-2026-33696 N8n | CRITICAL9.4 | N8n | CWE-1321 Prototype Pollution | 0.8% | Mar 25, 2026 |
| CVE-2026-33665 N8n | HIGH8.8 | N8n | CWE-287 Improper Authentication | 0.4% | Mar 25, 2026 |
| CVE-2026-33660 N8n | CRITICAL9.4 | N8n | CWE-94 Code Injection | 0.9% | Mar 25, 2026 |
| CVE-2026-27577 N8n | CRITICAL9.4 | N8n | CWE-94 Code Injection | 1.0% | Feb 25, 2026 |
| CVE-2026-27498 N8n | CRITICAL9.0 | N8n | CWE-94 Code Injection | 1.4% | Feb 25, 2026 |
| CVE-2026-27497 N8n | CRITICAL9.4 | N8n | CWE-89 SQL Injection | 1.1% | Feb 25, 2026 |
Page 1 of 2
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications