CIRT Alert
35 unique IP vulnarable via n8n (CVE:2026-21858) instances in Bangladesh

A total of 35 unique IP addresses have been identified exploitable via n8n instances (CVE: 2026-21858). BGD e-GOV CIRT advisory said, these IP address seems to be demonstrating active exploitation activity, indicating real-world targeting and compromise of vulnerable deployments.

Affected versons:

• Alert

Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction

By infosecbulletin / Saturday , November 7 2026

A major system failure has brought customer-facing banking services to a standstill at 128 shinkin banks across western Japan, leaving...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 06.11. 2026

By infosecbulletin / Friday , November 6 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Cyber Attack
• Hot Topic

Cyber attack causes French bank Credit Mutuel Arkea €100 million missing

By infosecbulletin / Friday , November 6 2026

French lender Credit Mutuel Arkea said on Thursday hackers had stolen around €100 million ($112.61 million) in a cyber heist...

Read More

• Hot Topic

OpenAI AI Pipeline Discovers 948 Linux Kernel Privilege Escalation Flaws in 30 Hours

By infosecbulletin / Thursday , November 5 2026

OpenAI says that an automated system found and confirmed 948 different Linux kernel security issues in one run. These flaws...

Read More

• National

Bangladeshi Researcher Rasel Earns First Apple CVE Recognition for Model I/O Flaw

By infosecbulletin / Thursday , November 5 2026

Apple credits Md Rasel Bhuyan and fellow researcher Musaab Khan for discovering an out-of-bounds write vulnerability affecting multiple Apple operating...

Read More

• Alert

WinRAR, WordPress RCE flaw & Zyxel GS1900 Zero-Day exploited in the wild

By infosecbulletin / Wednesday , November 4 2026

A flaw in Zyxel GS1900 switches was being used by hackers, and the update to fix it did not work....

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 04.11. 2026

By infosecbulletin / Wednesday , November 4 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Daily Security Update
• Data Breach

Daily Cyber security update for 03.11. 2026

By infosecbulletin / Tuesday , November 3 2026

Cyberattacks are rising around the world, including ransomware, malware, data leaks, and hacked websites. These events show how complex and...

Read More

• Cyber Attack

Using ARTEX AI, Hacker to attack 200 Organizations Across 14 Countries

By infosecbulletin / Tuesday , November 3 2026

Hackers used ARTEX, a free tool for testing security with AI, to attack over 200 organizations in 14 countries. The...

Read More

• Cyber Attack

Amadeus cyber incident impacted “Cathay Pacific, Qantas, Japan, Malaysia, Korean & Asiana” Airlines

By infosecbulletin / Monday , November 2 2026

A cybersecurity incident with Spanish travel tech company Amadeus IT Group has worried the global airline industry. Hackers got into...

Read More

• n8n self-hosted instances running versions 1.65.0 to below 1.120.0, This issue is fixed in
version 1.121.0 and later.

• Deployments accessible via the internet, especially those using webhooks for integrations
(e.g., with Slack, email services, or custom APIs).

Vulnerability Overview: CVE-2026-21858:

Product: n8n (Open-Source Workflow Automation Platform)
Severity: Critical (CVSS v3.1 Score: 10.0)
Affected Versions: All n8n versions prior to 1.121.0
Attack Vector: Network-based; no authentication required

Impact:

Exploiting this vulnerability allows an unauthenticated attacker to execute code remotely, access files, and steal sensitive information. In severe cases, it can compromise the entire system and enable further attacks on the network, greatly threatening infrastructure security.

BGD e-GOV CIRT urges to upgrade all n8n instances to v1.121.0 or later immediatly.

Related news:

BTRC NEIR face 2.4 million bot traffic in a minute
How Millions of Illegal IMEI Phones Infiltrated Bangladesh’s Networks