CVE · coverage timeline
CVE-2026-1470Authenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node.
4 articles from 4 outlets between 28 Jan and 29 Jan. First reported by SecurityOnline. The busiest day was Thu 29 Jan, with 2 articles.
- Articles
- 4
- all time · from 4 outlets
- Days with coverage
- 2
- across 2 days
- Busiest day
- 2
- articles on Thu 29 Jan
- Last 7 days
- 0a day
- vs 0 a day before
- First report
- 28 Jan
- SecurityOnline
- Exploit probability
- 20%
- EPSS · higher than 97% of CVEs
Coverage over time
4 articles · 28 Jan – 29 Jan
- First report28 Jan · SecurityOnline
Show as table
| Day (UTC) | Articles | Outlets |
|---|---|---|
| Wed 28 Jan | 2 | SecurityOnline 1, The Hacker News 1 |
| Thu 29 Jan | 2 | SecurityWeek 1, Dark Reading 1 |
Articles
4 articles2 articles
2 articles
- Sandbox Shattered: Critical n8n Flaw (CVSS 9.9) Allows Remote Code ExecutionSecurityOnline · first report
No articles in this range.