CIRT Alert
35 unique IP vulnarable via n8n (CVE:2026-21858) instances in Bangladesh

A total of 35 unique IP addresses have been identified exploitable via n8n instances (CVE: 2026-21858). BGD e-GOV CIRT advisory said, these IP address seems to be demonstrating active exploitation activity, indicating real-world targeting and compromise of vulnerable deployments.

Affected versons:

• Data Breach

LastPass says hackers stole customer data via Klue, supply chain breach

By infosecbulletin / Tuesday , June 23 2026

LastPass has reported a security issue with its vendor, Klue. This incident allowed an attacker unauthorized access to customer data....

Read More

• Cyber Attack

New Apple Exploit Bypasses Boot Defenses, Possibly Affects Millions of iPhones Worldwide

By infosecbulletin / Tuesday , June 23 2026

Researchers at cybersecurity firm Paradigm Shift found a new flaw called usbliter8. This flaw can get around main boot protections...

Read More

• Cyber Attack
• Data Breach

India’s Tata Electronics hit by cyber breach: Hacker target 630 GB record

By infosecbulletin / Tuesday , June 23 2026

A cyber attack seems to have affected one of India's top electronics companies. Tata Electronics has said there was a...

Read More

• Hot Topic

Anthropic’s Mythos reportedly broke NSA classified systems in hours

By infosecbulletin / Monday , June 22 2026

The recent finding shows how powerful Mythos is: the AI can access the US government's secret networks in just a...

Read More

• International

OpenAI New Method “Deployment Simulation” Predicts AI Risks Before Deployment

By infosecbulletin / Monday , June 22 2026

Test before going live is important for AI developers. But there's a problem: testing usually uses fake scenarios that often...

Read More

• Cyber Attack

AryStinger botnet infected thousands of D-Link routers globally

By infosecbulletin / Sunday , June 21 2026

AryStinger has taken control of over 4,000 old D-Link routers to use them as proxies for harmful traffic. The team...

Read More

• International

Hacker suspected of sending alerts across Brazil

By infosecbulletin / Sunday , June 21 2026

Brazil's government suspects a hacking attack triggered an unauthorized ‌alert sent to cell phones across parts of the country early...

Read More

• Hot Topic

CyberSentinel AI features 33 security tools like Nmap, SQLMap, and ZAP, utilizing Claude and GPT

By infosecbulletin / Sunday , June 21 2026

A new open-source cybersecurity tool named CyberSentinel AI v3.0 has come out. It is an important step in self-operated security...

Read More

• Event

Barracuda hosts Dhaka roundtable on cyber resilience

By infosecbulletin / Saturday , June 20 2026

Barracuda gathered industry people in Dhaka on 18 June 2026 for a roundtable talk about cyber resilience. The company shared...

Read More

• Alert
• International

CISA Alerts Fortinet Users as FortiBleed Affects 86,644 FortiGate Devices

By infosecbulletin / Saturday , June 20 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) asked Fortinet users with FortiGate devices on Thursday to act to protect...

Read More

• n8n self-hosted instances running versions 1.65.0 to below 1.120.0, This issue is fixed in
version 1.121.0 and later.

• Deployments accessible via the internet, especially those using webhooks for integrations
(e.g., with Slack, email services, or custom APIs).

Vulnerability Overview: CVE-2026-21858:

Product: n8n (Open-Source Workflow Automation Platform)
Severity: Critical (CVSS v3.1 Score: 10.0)
Affected Versions: All n8n versions prior to 1.121.0
Attack Vector: Network-based; no authentication required

Impact:

Exploiting this vulnerability allows an unauthenticated attacker to execute code remotely, access files, and steal sensitive information. In severe cases, it can compromise the entire system and enable further attacks on the network, greatly threatening infrastructure security.

BGD e-GOV CIRT urges to upgrade all n8n instances to v1.121.0 or later immediatly.

Related news:

BTRC NEIR face 2.4 million bot traffic in a minute
How Millions of Illegal IMEI Phones Infiltrated Bangladesh’s Networks