Security Advisory
CVE-2026-56360
4
MEDIUM
Vulnerability Description
n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data.
Published Date
July 8, 2026
Official Source
NIST NVD Advisory