[{"recipe": "n8n", "date": "2026-09-15", "versions": ["1.0.0+1.81.2", "2.0.0+1.114.4", "2.1.0+1.120.1"], "upgrade_to": ["2.2.0+1.123.9", "2.2.0+1.123.9", "2.2.0+1.123.9"], "images": ["n8nio/n8n:1.81.2", "n8nio/n8n:1.114.4", "n8nio/n8n:1.120.1"], "short": "CRITICAL RCE, upgrade immediately", "description": "Docker images \"n8nio/n8n:1.81.2\", \"n8nio/n8n:1.114.4\", and \"n8nio/n8n:1.120.1,\" used in the Co-op Cloud n8n recipe, for versions \"1.0.0+1.81.2\", \"2.0.0+1.114.4\", and \"2.1.0+1.120.1\", are vulnerable to CVE-2026-21858. This CVE, dubbed \"Ni8mare,\" is a CVSS 10.0 (maximum score) network accessible, unauthenticated, remote code execution that is trivial to exploit. It has an EPSS (Exploit Prediction Scoring System) of .78 meaning it is 78% likely that instances of this vulnerability have been or will be exploited wihin he next 30 days. Upgrade immediately.", "ccsa_id": "CCSA-20260915-01", "url": "https://0x29a.codeberg.pages/CCSA-DEMO//CCSA-20260915-01.html", "upgrade_paths": ["1.0.0+1.81.2 -> 2.2.0+1.123.9", "2.0.0+1.114.4 -> 2.2.0+1.123.9", "2.1.0+1.120.1 -> 2.2.0+1.123.9"]}, {"recipe": "wordpress", "date": "2026-09-23", "images": ["wordpress:7.0.0", "wordpress:7.0.1", "wordpress:7.0.2", "wordpress:7.0.3", "wordpress:7.0.4", "wordpress:7.0.5"], "versions": ["4.0.0+7.0.4", "3.0.6+7.0.4", "3.0.5+7.0.4"], "upgrade_to": [], "short": "CRITICAL RCE, upgrade immediately", "description": "Wordpress contains an unauthenticated path traversal. Under certain conditions (i.e. the user has installed certain plugins), this leads to RCE in Wordpress that is network accessible, unauthenticated, and trivial to exploit. It has an EPSS of 0.0042 which means there it is 4.2% likely that instances of this vulnerability have been or will be exploited within the next 30 days. Upgrade immediately.", "ccsa_id": "CCSA-20260923-02", "url": "https://0x29a.codeberg.pages/CCSA-DEMO//CCSA-20260923-02.html", "upgrade_paths": []}, {"recipe": "forgejo", "date": "2026-09-23", "images": ["codeberg.org/forgejo/forgejo:15.0.7-rootless"], "versions": ["5.6.1+15.0.7-rootless"], "upgrade_to": ["5.6.2+15.0.8-rootless"], "short": "CRITICAL RCE, upgrade immediately", "description": "Forgejo contains a critical vulnerability in template repository handling (CVE-2026-89094) where a malicious template repo can smuggle in a hidden .git directory during variable expansion that git then adopts, letting an authenticated user read arbitrary data/execute arbitrary code. Upgrade to 16.0.4 (or 15.0.8) immediately.", "ccsa_id": "CCSA-20260925-03", "url": "https://0x29a.codeberg.pages/CCSA-DEMO//CCSA-20260925-03.html", "upgrade_paths": ["5.6.1+15.0.7-rootless -> 5.6.2+15.0.8-rootless"]}]