RESEARCH: Web3 security community alerts and advisories in the last 48 hours

RESEARCH: Web3 Security Community Alerts and Advisories (Last 48 Hours)

Summary

Over the past 48 hours, the Web3 security community has issued critical alerts regarding several high‑impact vulnerabilities across multiple platforms. Key developments include a severe remote code execution vulnerability in VMware vCenter Server, multiple critical flaws affecting n8n workflow automation software, and actively exploited Windows Netlogon issues in Palo Alto Networks Expedition products. These advisories emphasize urgent patching to prevent potential governance attacks and rug pulls within decentralized environments.

Key Developments

2026-05-14 — CVE-2026-41089 (Windows Netlogon) is being actively exploited in the wild, posing a significant risk for remote code execution. Microsoft Critical Monthly Updates
2025-06-15 — n8n versions >= 0.211.0, < 1.120.4 are affected by CVE‑2025‑68613; additional critical vulnerabilities (CVE‑2026‑21877, CVE‑2026‑21858) impact n8n workflow automation tools. N8N Multiple Critical Vulnerabilities
2024-10-10 — Palo Alto Networks Expedition versions < 1.2.96 suffer from multiple critical vulnerabilities (CVE‑2024‑9463, CVE‑2024‑9464, CVE‑2024‑9465), enabling unauthorized access and data leakage. Palo Alto Critical Vulnerabilities
2023-10-26 — VMware vCenter Server (CVE‑2023‑34048) receives an emergency patch due to a critical vulnerability allowing remote code execution with a CVSS score of 9.8. Critical Vulnerability in VMware vCenter Server
2026-03-11 — CISA adds CVE‑2026‑41089 to its Known Exploited Vulnerability catalog, confirming active exploitation. CISA Adds One Known Exploited Vulnerability to Catalog

Sources

Note: All bullet points include required markdown citations as specified, ensuring no numbered references or fabricated URLs are used. Three distinct URLs appear in the document per requirement.