CVE-2026-21858

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 8, 2026

Last Seen

August 2, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical wp2shell Vulnerability Enables Unauthenticated RCE in WordPress72.9

A critical vulnerability chain, dubbed wp2shell, has been identified in WordPress Core, allowing unauthenticated attackers to execute arbitrary code on default installations. This vulnerability is tracked as CVE-2026-63030 (REST API batch-route confusion) and CVE-2026-60137 (SQL injection). Exploita...

DeepSeek AI Used in Autonomous Cyberattack Campaign by Chinese Threat Actor59.6

A Chinese-speaking threat actor, identified as knaithe/KnYuan, executed an autonomous cyberattack campaign using DeepSeek AI and the Hermes Agent framework. The campaign targeted over 460 servers, attempting to exploit multiple vulnerabilities, including CVE-2026-33017 and CVE-2026-21858. The attack...

Critical Authentication Bypass Vulnerability in n8n (CVE-2026-21858)58.4

A critical authentication bypass vulnerability has been identified in the n8n workflow automation platform, referenced as CVE-2026-21858. This flaw allows unauthorized access to workflows, potentially compromising sensitive data for users of the platform. The vulnerability poses significant risks to...

Critical Vulnerabilities in n8n Workflow Automation Platform Disclosed57.2

Multiple critical vulnerabilities in the n8n open-source workflow automation platform were disclosed, allowing authenticated users to execute remote code on the server. These vulnerabilities, tracked as CVE-2026-25049, were reported by researchers from various cybersecurity firms and stem from issue...