Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects an n8n form file-upload request combining the vulnerable /form/ multipart upload endpoint with a path-traversal marker in the filename field, consistent with the chained CVE-2026-21858 arbitrary file read to CVE-2025-68613 sandbox-bypass RCE exploit.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
3 months ago
005