CVE-2026-1470 2

Vulnerability (CVE)

Two High-Severity n8n Flaws Allow Authenticated Remote Code Execution

JFrog Security Research disclosed two new flaws in the n8n workflow automation platform, including CVE-2026-1470, which carries a high CVSS score despite requiring authentication because any n8n user can exploit it to take over the entire instance. The...

Vulnerabilities & Patching

⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats

Cyber Risks The Hacker News

Google disrupted the IPIDEA residential proxy network, seizing or sinkholing command-and-control domains and reducing its available device pool by millions. The network turned enrolled devices into proxy exit nodes, sold access to customers, and has been...