Critical n8n v CVE-2026-25049 allows authenticated workflow abuse to execute system commands and expose server data.
We are seeing exploitation of SolarWinds Web Help Desk via CVE‑2025‑40551 and CVE‑2025‑40536 that can lead to domain compromise; here is how to patch, hunt, and mitigate now.