Skip to content
Noroxi

Masofgon

12 credited records · 12 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Masofgon

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-126389
    25Monitor

    n8n before 1.123.89 Authentication Bypass via Chat Trigger Embedded Chat

    MediumCVSS 6.3No exploit

    n8n-io · n8nToday

  • CVE-2026-126383
    21Monitor

    n8n before 1.123.89 NoSQL Injection via MongoDB Node Update Key

    MediumCVSS 5.3No exploit

    n8n-io · n8nToday

  • CVE-2026-118678
    28Monitor

    n8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History Compaction

    HighCVSS 7.1No exploitEPSS 0%

    n8n-io · n8nOct 28, 2026

  • CVE-2026-118676
    20Monitor

    n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass

    MediumCVSS 5.1No exploitEPSS 0%

    n8n-io · n8nOct 28, 2026

  • CVE-2026-118648
    33Monitor

    n8n before 1.123.85, 2.43.5, and 2.44.1 Stored XSS via Webhook Responses Missing Sandbox Policy

    HighCVSS 8.4No exploitEPSS 0%

    n8n-io · n8nOct 28, 2026

  • CVE-2026-118646
    28Monitor

    n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node

    HighCVSS 7.1No exploitEPSS 0%

    n8n-io · n8nOct 28, 2026

  • CVE-2026-118645
    28Monitor

    n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter

    HighCVSS 7.0No exploitEPSS 0%

    n8n-io · n8nOct 28, 2026

  • CVE-2026-118642
    20Monitor

    n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Permission Check Bypass via Inline Sub-Workflows

    MediumCVSS 5.1No exploitEPSS 0%

    n8n-io · n8nOct 28, 2026

  • CVE-2026-110843
    32Monitor

    n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint

    HighCVSS 8.2No exploitEPSS 0%

    n8n-io · n8nOct 14, 2026

  • CVE-2026-92587
    21Monitor

    n8n before 1.123.76 Sandbox Escape via Git Relative URL

    MediumCVSS 5.3No exploitEPSS 0%

    n8n-io · n8nSep 16, 2026

  • CVE-2026-85171
    28Monitor

    n8n before 1.123.73 Credential Exposure via Error Logging

    HighCVSS 7.1No exploitEPSS 0%

    n8n · n8nSep 3, 2026

  • CVE-2026-77076
    28Monitor

    n8n before 1.123.69 Credential Leak via GraphQL Node Error

    HighCVSS 7.1No exploitEPSS 0%

    n8n · n8nAug 20, 2026

  • CVE-2026-77075
    33Monitor

    n8n before 1.123.69 Expression Injection via Resource Locator

    HighCVSS 8.4No exploitEPSS 0%

    n8n · n8nAug 20, 2026

  • CVE-2026-77072
    33Monitor

    n8n before 1.123.69 Stored XSS via Form Completion Page

    HighCVSS 8.4No exploitEPSS 0%

    n8n · n8nAug 20, 2026