CVE-2026-21440 2

Vulnerability (CVE)

Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on Servers

A critical path traversal flaw in the @adonisjs/bodyparser npm package, tracked as CVE-2026-21440 with a CVSS score of 9.2, lets a remote attacker write arbitrary files on the server when MultipartFile.move() is called without the second options argument...

Vulnerabilities & Patching

⚡ Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & More

Cyber Risks The Hacker News

A maximum-severity vulnerability in the n8n workflow automation platform, tracked as CVE-2026-21858 and called Ni8mare, allows unauthenticated remote code execution on locally deployed instances running versions prior to 1.121.0. The flaw arises in...

Vulnerabilities & Patching