n8n-MCP Data Exposure Vulnerability (CVE-2026-55608): Medium Severity
A significant security vulnerability has been identified in n8n-MCP, an MCP server designed to provide AI assistants with access to n8n node documentation, properties,…
Ucartz Updates
Security & Release Updates
Vulnerability advisories and release notes for the hosting, server and automation software we run: what changed, who is affected and how to stay safe.
n8n-MCP Multi-Tenant Data Exposure Vulnerability (CVE-2026-54052): Critical Severity
Understanding the Critical n8n-MCP Vulnerability n8n-MCP is a server that helps AI assistants access documentation, properties, and operations for n8n nodes. A serious security…
n8n Permission Bypass Vulnerability (CVE-2026-59259): Medium Severity
A significant security flaw has been discovered in n8n, a popular workflow automation tool, that could allow unauthorized access to sensitive information. This vulnerability,…
Open-WebUI Remote Code Execution Vulnerability (CVE-2026-56400): High Severity
A critical security flaw has been found in Open-WebUI, an open-source web interface for large language models. This vulnerability, identified as CVE-2026-56400, could allow…
n8n Authentication Bypass Vulnerability (CVE-2026-56353): Medium Severity
Understanding the n8n Chat Trigger Node Authentication Bypass In the world of workflow automation, tools like n8n are incredibly powerful, connecting various services and…
Drupal Core Cross-Site Scripting Vulnerability (CVE-2026-55808): Medium Severity
Overview A significant security flaw, known as Cross-Site Scripting (XSS), has been identified in Drupal core. This vulnerability, tracked as CVE-2026-55808, allows attackers to…
Drupal AI Agents Incorrect Authorization Vulnerability (CVE-2026-13237): Medium Severity
Overview A security flaw has been identified in the Drupal AI Agents module. This issue, tracked as CVE-2026-13237, involves an ‘Incorrect Authorization’ vulnerability that…
Drupal AI Agents Missing Authorization Vulnerability (CVE-2026-13236): Medium Severity
Understanding the Drupal AI Agents Vulnerability A significant security flaw has been identified in the Drupal AI Agents module, categorized as a Missing Authorization…
Drupal Core Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-55807): Low Severity
Drupal, a widely-used content management system, has disclosed a security vulnerability identified as a Server-Side Request Forgery (SSRF). This issue, tracked as CVE-2026-55807, has…
Drupal Core Open Redirect Vulnerability (CVE-2026-55806): Medium Severity
Understanding the Threat: Open Redirect in Drupal Core A new security alert has emerged concerning Drupal core, identifying an "Open Redirect" vulnerability, tracked as…
Drupal Core Object Injection Vulnerability (CVE-2026-55804): Medium Severity
The digital world relies heavily on well-secured content management systems, and Drupal stands as a popular choice for countless websites. However, even robust platforms…
Drupal Core Object Injection Vulnerability (CVE-2026-55803): Medium Severity
Understanding the Object Injection Vulnerability in Drupal Core A significant security flaw has been identified in Drupal core, specifically an “Improperly Controlled Modification of…
Start Building Today
Ready to Get Started?
VPS, dedicated servers, streaming and managed hosting with 24/7 support from the Ucartz team.