InfoSecBulletin Cybersecurity for mankind
A total of 35 unique IP addresses have been identified exploitable via n8n instances (CVE: 2026-21858). BGD e-GOV CIRT advisory said, these IP address seems to be demonstrating active exploitation activity, indicating real-world targeting and compromise of vulnerable deployments.
Affected versons:
Brazilian health surveillance platform breach exposes 100K+ sensitive documents
Thousands of data centers are at risk of compromise due to a 22-year-old flaw
Bangladesh Launches (CIRS) and National ICT & Cyber Security Rating System (NRS)
CVE-2026-18574
Check Point Authentication Bypass Hits Management Server
TP-Link RCE and SonicWall Zero-Click Flaws Enable Complete Device Compromise
ExfilSquad releases info of over 100,000 UK police officers, staff
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
• n8n self-hosted instances running versions 1.65.0 to below 1.120.0, This issue is fixed in
version 1.121.0 and later.
• Deployments accessible via the internet, especially those using webhooks for integrations
(e.g., with Slack, email services, or custom APIs).
Vulnerability Overview: CVE-2026-21858:
Product: n8n (Open-Source Workflow Automation Platform)
Severity: Critical (CVSS v3.1 Score: 10.0)
Affected Versions: All n8n versions prior to 1.121.0
Attack Vector: Network-based; no authentication required
Impact:
Exploiting this vulnerability allows an unauthenticated attacker to execute code remotely, access files, and steal sensitive information. In severe cases, it can compromise the entire system and enable further attacks on the network, greatly threatening infrastructure security.
BGD e-GOV CIRT urges to upgrade all n8n instances to v1.121.0 or later immediatly.
Related news:
BTRC NEIR face 2.4 million bot traffic in a minute
How Millions of Illegal IMEI Phones Infiltrated Bangladesh’s Networks
