Статьи Support
🚨 CVE-2026-85849
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85850
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85851
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85852
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
🚨 CVE-2026-85853
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85854
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85855
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85856
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.
🚨 CVE-2026-85857
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
🚨 CVE-2026-85858
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85859
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.
🚨 CVE-2026-85860
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85861
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85863
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
🚨 CVE-2026-85865
Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
🚨 CVE-2026-16255
GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP membership lock was enabled, an authenticated user could have granted or accepted project and group...
🚨 CVE-2026-65593
n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a server-side request forgery vulnerability in the dynamic-node-parameters endpoints that lack authorization scopes. Authenticated attackers can supply absolute URLs in routing configuration to override baseURL...
🚨 CVE-2026-65594
n8n before 2.29.8 and 2.30.x before 2.30.1 (affected from 2.27.0, when the OAuth 2.1 consent and token-issuance flow was introduced) does not verify that the authenticated user has access to the workflow referenced as the OAuth resource. On instances with at least one active MCP...
🚨 CVE-2026-65595
n8n before 2.30.1 and 2.29.8 assigns all Public API key scopes to JWTs issued through the Token Exchange module regardless of the acting user's role. On instances where the Token Exchange feature and Public API are enabled, a low-privileged user who can obtain a valid external...
🚨 CVE-2026-65596
n8n before 1.123.64, 2.29.8, and 2.30.1 fails to enforce the "Allowed HTTP Request Domains" restriction on HTTP-based credentials (Header Auth, Basic Auth, Query Auth, OAuth) in the GraphQL node, unlike the HTTP Request node. An authenticated user able to create or edit...
Автоматический гарант это финансовая безопасность: Покупатель может быть уверен, что его деньги не попадут к продавцу до того, как он получит и проверит товар или услугу. Продавец, в свою очередь, защищен от не оплаты, так как гарант подтверждает наличие средств у покупателя до начала выполнения обязательств.