https://patchfirst.co/vendor/n8n/New and newly exploited n8n CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2025-68613/CVE-2025-68613#kevWed, 11 Mar 2026 00:00:00 GMTn8n · n8n. In CISA KEV since 2026-03-11. ENISA EUVD lists it as exploited. EPSS 99.0% (higher than 99.93% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 78.0 of 100.kevpublic-exploitT1078T1059https://patchfirst.co/cve/CVE-2026-21858/CVE-2026-21858Wed, 07 Jan 2026 00:00:00 GMTn8n-io · n8n. Not in CISA KEV. EPSS 78.2% (higher than 99.58% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 74.9 of 100.public-exploit