n8n Node.js パッケージ < 2.27.4 / 2.28.0 < 2.28.1 アカウント乗っ取り(CVE-2026-59208)

high Nessus プラグイン ID 330282

バージョン 1.2

Jul 29, 2026, 3:16 PM

  • CVSS metrics ("Cvssv4 threat score" set to 7.6)
  • CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U")
  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C")
  • CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C")
  • Exploit attributes ("Exploit available" set to "False")
  • Exploit attributes ("Exploitability ease" set to "No known exploits are available")

Plugin Feed: 202607291516

バージョン 1.1

Jul 28, 2026, 1:30 PM

  • New

Plugin Feed: 202607281330

* Changelogs are generally available for changes made after Nov 1, 2022