{"vulnerability": "CVE-2026-1470", "sightings": [{"uuid": "f9a9e5ff-41a6-43be-9c86-01d700ff4aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mdvty6rho224", "content": "", "creation_timestamp": "2026-02-02T22:03:01.969809Z"}, {"uuid": "30223d8c-6951-4564-ae7b-f701449029d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mdnodh5dtd2v", "content": "", "creation_timestamp": "2026-01-30T16:00:35.709522Z"}, {"uuid": "f0756a76-3ae3-45df-8f4b-c861cbf8c87f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mdtdqtvqk625", "content": "", "creation_timestamp": "2026-02-01T22:07:12.770941Z"}, {"uuid": "7267b9d2-9954-4236-adfd-2a2e1f6d8a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mdk7pzufex2k", "content": "", "creation_timestamp": "2026-01-29T07:01:13.378697Z"}, {"uuid": "6e354f9c-7e9d-4fb5-bc19-00bcc094e019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3mdkahk2zzk2x", "content": "", "creation_timestamp": "2026-01-29T07:14:28.277851Z"}, {"uuid": "d6a237c4-c934-4a0a-bac5-794cef8e4f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3mdkai2ojez2k", "content": "", "creation_timestamp": "2026-01-29T07:14:38.954610Z"}, {"uuid": "50b42bf9-5231-4684-8f9d-0740f352af83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3mdmq5ru47v2v", "content": "", "creation_timestamp": "2026-01-30T07:00:33.774760Z"}, {"uuid": "071472ca-7616-46f8-a21c-18bec03294b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1470", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mdq3gjahpp2m", "content": "", "creation_timestamp": "2026-01-31T15:00:16.360940Z"}, {"uuid": "60ff5ad5-3aff-4268-a0c5-32de7a34b0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mdkspr36c32e", "content": "", "creation_timestamp": "2026-01-29T12:41:04.405321Z"}, {"uuid": "f119c791-8139-47c0-8126-e4a71758c278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdrbwl5itf2w", "content": "", "creation_timestamp": "2026-02-01T02:29:18.122583Z"}, {"uuid": "0e423f0c-125e-4512-bb21-a0163a17a957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg2srtdrw2o", "content": "", "creation_timestamp": "2026-01-27T15:22:37.377425Z"}, {"uuid": "29b49c66-1b8d-4488-9144-216e8e3926d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdg6a3n4jo2j", "content": "", "creation_timestamp": "2026-01-27T16:23:44.610942Z"}, {"uuid": "3526bbce-1059-42b5-b664-363d835d70e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://thehackernews.com/2026/01/two-high-severity-n8n-flaws-allow.html", "content": "", "creation_timestamp": "2026-01-28T11:43:00.000000Z"}, {"uuid": "ba7efeaa-14e1-4f63-9084-506e0951060b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/redhotcyber.bsky.social/post/3mdijd4b26t2o", "content": "", "creation_timestamp": "2026-01-28T14:47:37.103262Z"}, {"uuid": "b47aa9df-ffc9-4c94-835f-72e9a2c00623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mdileuokre24", "content": "", "creation_timestamp": "2026-01-28T15:24:23.777891Z"}, {"uuid": "844da222-893b-4085-9e68-3891ba2a5118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/alexk1919.com/post/3mimktfkbkz26", "content": "", "creation_timestamp": "2026-04-03T20:31:14.413639Z"}, {"uuid": "b9b2d4d9-642b-482c-9ba4-e678babe525e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://bsky.app/profile/ctsd-gmbh.bsky.social/post/3mlnqujgr5x2v", "content": "[NEU] [hoch] FreeRDP: Mehrere Schwachstellen (CVE-2026-1470) erlauben Angreifern Code-Ausf\u00fchrung und DoS-Angriffe. Aktualisieren Sie FreeRDP sofort auf die neueste Version, um diese Risiken zu schlie\u00dfe\u2026\n\nhttps://www.ctsd.de/insights/2026-05-schwachstellen-neu-hoch-freerdp-mehrere-schwachstellen.html", "creation_timestamp": "2026-05-12T12:07:32.519713Z"}, {"uuid": "31e1e899-451b-4f0f-8299-ae1aa463a8a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14703", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116865605611564132", "content": "SQL injection (MEDIUM severity) found in itsourcecode Hospital Management System 1.0 via 'editid' in /patientorder.php (CVE-2026-14703). No patch yet \u2014 enforce input validation &amp; parameterized queries. https://radar.offseq.com/threat/cve-2026-14703-sql-injection-in-itsourcecode-hospi-f942c28e535ca531 #OffSeq #SQLInjection #Vuln #HealthcareIT", "creation_timestamp": "2026-07-05T05:00:25.370648Z"}, {"uuid": "6d11afe8-7f68-4fec-bd7a-87bc658bece5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14703", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpus6ntnj72a", "content": "SQL injection risk (MEDIUM) in itsourcecode Hospital Management System 1.0 via 'editid' in /patientorder.php. Patch unavailable \u2014 apply input validation now. CVE-2026-14703 https://radar.offseq.com/threat/cve-2026-14703-sql-injection-in-itsourcecode-hospi-f942c28e535ca531 #OffSeq #SQLInjection #H...", "creation_timestamp": "2026-07-05T05:00:27.893029Z"}, {"uuid": "59c12776-02f4-4dc8-a85e-dffa22cb50b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14701", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpvcmvrl7n2l", "content": "CVE-2026-14701 - code-projects Internship Management System Password Change Endpoint change_password.php sql injection\nCVE ID : CVE-2026-14701\n \n Published : July 5, 2026, 5:16 a.m. | 3\u00a0hours ago\n \n Description : A vulnerability was detected in code-projects Internship Managem...", "creation_timestamp": "2026-07-05T09:54:45.336194Z"}, {"uuid": "b3f132eb-7365-4217-b2dd-14e06699b729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpvcwgrgns2r", "content": "CVE-2026-14700 - code-projects Internship Management System Employer Login Endpoint login.php sql injection\nCVE ID : CVE-2026-14700\n \n Published : July 5, 2026, 5:16 a.m. | 3\u00a0hours ago\n \n Description : A security vulnerability has been detected in code-projects Internship Mana...", "creation_timestamp": "2026-07-05T10:00:05.524823Z"}, {"uuid": "27df78dd-9965-4a2b-8703-5e7afb438607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14703", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpvd5uph3t2p", "content": "CVE-2026-14703 - itsourcecode Hospital Management System patientorder.php sql injection\nCVE ID : CVE-2026-14703\n \n Published : July 5, 2026, 5:16 a.m. | 3\u00a0hours ago\n \n Description : A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an u...", "creation_timestamp": "2026-07-05T10:04:14.746317Z"}, {"uuid": "feecf750-689e-4607-aa11-249f68a46047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14705", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpvdbz42f22w", "content": "CVE-2026-14705 - code-projects Online Examination head.php sql injection\nCVE ID : CVE-2026-14705\n \n Published : July 5, 2026, 6:16 a.m. | 2\u00a0hours ago\n \n Description : A vulnerability was determined in code-projects Online Examination 1.0. Affected by this issue is some unknown...", "creation_timestamp": "2026-07-05T10:06:33.441240Z"}, {"uuid": "413eaa52-33a8-4b98-bf53-3a304265734c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpvdwrkxhe2p", "content": "CVE-2026-14704 - stephen-kruger bluebox cross site scripting\nCVE ID : CVE-2026-14704\n \n Published : July 5, 2026, 6:16 a.m. | 2\u00a0hours ago\n \n Description : A vulnerability was found in stephen-kruger bluebox up to 4.5.12. Affected by this vulnerability is an unknown functionali...", "creation_timestamp": "2026-07-05T10:18:11.277235Z"}, {"uuid": "7a1c8587-5b29-4fc5-8c4f-db746f40de87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14702", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpveo4jaiv24", "content": "CVE-2026-14702 - zcaceres markdownify-mcp webpage-to-markdown Markdownify.ts saveToTempFile random values\nCVE ID : CVE-2026-14702\n \n Published : July 5, 2026, 5:16 a.m. | 3\u00a0hours ago\n \n Description : A flaw has been found in zcaceres markdownify-mcp up to 1.1.0. This impacts t...", "creation_timestamp": "2026-07-05T10:31:13.723751Z"}, {"uuid": "0c7fde5c-6a82-40bd-b92e-2686e9b69210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14706", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpvfrwh34i2r", "content": "CVE-2026-14706 - code-projects Online Examination Quiz Creation Feature update.php sql injection\nCVE ID : CVE-2026-14706\n \n Published : July 5, 2026, 6:16 a.m. | 2\u00a0hours ago\n \n Description : A vulnerability was identified in code-projects Online Examination 1.0. This affects a...", "creation_timestamp": "2026-07-05T10:51:15.008320Z"}, {"uuid": "f51af351-2916-4376-878e-8387f190f2d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://t.me/EchelonEyes/4309", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 n8n \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b JFrog Security Research \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 n8n, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-1470 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9.9), \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 JavaScript \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Expression, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0443\u0437\u0435\u043b n8n. \n\u0412\u0442\u043e\u0440\u0430\u044f, CVE-2026-0863 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8.5), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 Python-\u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 python-task-executor.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u0430 n8n, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u043b\u0443\u0447\u0430\u0438, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 n8n \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0432\u0441\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a API, \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 1.123.17, 2.4.5 \u0438\u043b\u0438 2.5.1 \u0434\u043b\u044f CVE-2026-1470 \u0438 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 1.123.14, 2.3.5 \u0438\u043b\u0438 2.4.2 \u0434\u043b\u044f CVE-2026-0863.\n\n#\u041a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #n8n #\u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435\u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u041a\u043e\u0434\u0430 \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/01214a", "creation_timestamp": "2026-07-26T02:00:25.719772Z"}, {"uuid": "abee1ddb-0b60-4473-968a-5fd597dbe43b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1470", "type": "seen", "source": "https://t.me/EchelonEyes/4309", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 n8n \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b JFrog Security Research \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 n8n, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-1470 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9.9), \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 JavaScript \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Expression, \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0443\u0437\u0435\u043b n8n. \n\u0412\u0442\u043e\u0440\u0430\u044f, CVE-2026-0863 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8.5), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 Python-\u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 python-task-executor.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u0430 n8n, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u043b\u0443\u0447\u0430\u0438, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 n8n \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0432\u0441\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a API, \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 1.123.17, 2.4.5 \u0438\u043b\u0438 2.5.1 \u0434\u043b\u044f CVE-2026-1470 \u0438 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 1.123.14, 2.3.5 \u0438\u043b\u0438 2.4.2 \u0434\u043b\u044f CVE-2026-0863.\n\n#\u041a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #n8n #\u0423\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435\u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u041a\u043e\u0434\u0430 \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/01214a", "creation_timestamp": "2026-07-27T00:00:10.141451Z"}]}