runZero to join Dragos, creating an industry-transforming security platform backed by $4B Accenture investment. More →

Start Free Book Demo

Platform
- Exposure Management Platform
  Complete security visibility across IT, OT, IoT, cloud, mobile, and remote assets.
  
  Total Attack Surface Visibility
  
  Full-Spectrum Exposure Detection
  
  Risk Prioritization & Insights
  
  Compliance, Reporting, & KPIs
  
  Fast Deployment & Scalability
- Asset Fingerprinting & Contextualization
  runZero employs a multi-faceted approach to perform high-fidelity fingerprinting for IT, OT, and IoT assets – no agents or credentials required.
- Integrations
  runZero seamlessly integrates with a wide variety of tools, enhancing network visibility, enriching asset data, and uncovering control gaps.
- Community Edition
  Our completely free version of the runZero Platform is ideal for home use and environments with fewer than 100 assets.
Advanced toplogy, attack path mapping & deep OT intelligence!

With our latest release you can see exactly how an attacker could move through your network, allowing you to harden critical choke points and remediate exposures before they are exploited. Plus we expanded our OT telemetry to provide deep insights into the role and risk profile of every device.

Learn More
Solutions
- Solutions
  Gain visibility, control the unknowns, and ensure compliance with confidence.
  
  Incident Response
  
  Unmanaged & Unknowns
  
  Vulnerability Management
  
  Mergers & Acquisitions
  
  Compliance & Insurance
- Regulatory Compliance
  Ensure compliance and stay resilient against evolving cyber threats.
  
  CSRB
  
  DORA
  
  NIST CSF & 800-171
  
  NIS2
  
  NYDFS
  
  PCI DSS
Analyst Perspective: GigaOm 2026 Radar for OT Security

This new report evaluates security solutions designed specifically for industrial environments, focusing on purpose-built capabilities that can be safely deployed in fragile OT environments. runZero is positioned as a Challenger & Fast Mover in the Innovation/Platform Play quadrant. Read the report for GigaOm’s full take!

Read the Report
Resources
- Resource Center
  Dive into a treasure trove of resources to expand your exposure management knowledge.
  
  Reports
  
  Webcasts
  
  Solution Briefs
- runZero Research
  Explore the world of exposure management through the runZero lens.
  
  Research Blogs
  
  Rapid Responses
  
  runZero Hour
- runZero Blog
  See what's happening at runZero and read up on the latest ideas, opinions, and articles from our experts and researchers.
- Support Resources
  Everything you need to maximize your experience with the runZero Platform.
  
  Documentation
  
  REST API
  
  Open Source
Watch the runZero Day replay!

The inaugural runZero Day livestream was one for the books! From the inner workings of the CVE program and modern cyber journalism to the realities of OT security and the startup investment ecosystem, our wonderful guests helped us cover the trends that are defining our industry.

Watch the Replay
Customers
- Our Customers
  Our customers are everything. We're super proud to be trusted by leading organizations around the globe to help them improve their security.
- Case Studies
  See how runZero has empowered security teams to take control of their networks, uncover their unknowns, and save significant time and money.
  
  North Carolina K-12
  
  Topcon
  
  Capgemini
  
  Presidio
  
  York University
- Testimonials
  Read reviews of the runZero Platform and see how teams have improved their security with our technology.
Case Study: How runZero established North Carolina’s K–12 exposure management program

Learn how runZero became the foundation for exposure management across 343 North Carolina Public School Units.

Read the Case Study
Partners
- Infinity Partner Program
  See how we can work together to provide best-in-class security solutions and outcomes for our joint customers.
- Partner Directory
  Explore our directory of trusted (and awesome) partners.
- Partner Sign In
  Sign in to our Infinity Partner Portal.
Join our Infinity Partner Program

Designed with a partner-first mindset, the runZero Infinity Partner Program offers incredibly valuable resources, relationships, and rewards to partners who choose to grow their business with us.

Become a runZero Partner
About
- About Us
  Wondering who the heck are these people? Meet the team and get the story behind runZero... once upon a time called Rumble.
- Events
  Track down runZero Yetis in the wild! Join us in-person or virtually at one of our upcoming events.
- Investors
  Meet the cybersecurity investors, trailblazers, and innovators who help us navigate our journey and the evolving security landscape.
- Newsroom
  Read the latest articles, announcements, and press releases from runZero.
- Careers
  Want to join our forces? We're looking for bright minds and passionate souls who want to write the next chapter in exposure management.
Join us on July 15 for the next exciting episode!

Every month, our research team does a deep dive into the ones and zeros behind all things exposure, from new threats and risky devices to the most secretive, silent, and unheard of vulnerabilities hiding in IT, OT, IoT, remote, cloud, and mobile environments – see you there!

Register Now
Pricing
Support
Contact Us
Sign In

runZero to join Dragos, creating an industry-transforming security platform backed by $4B Accenture investment. More →

Exposure Management Platform
Complete security visibility across IT, OT, IoT, cloud, mobile, and remote assets.
Asset Fingerprinting & Contextualization
runZero employs a multi-faceted approach to perform high-fidelity fingerprinting for IT, OT, and IoT assets – no agents or credentials required.
Integrations
runZero seamlessly integrates with a wide variety of tools, enhancing network visibility, enriching asset data, and uncovering control gaps.
Community Edition
Our completely free version of the runZero Platform is ideal for home use and environments with fewer than 100 assets.

Advanced toplogy, attack path mapping & deep OT intelligence!

With our latest release you can see exactly how an attacker could move through your network, allowing you to harden critical choke points and remediate exposures before they are exploited. Plus we expanded our OT telemetry to provide deep insights into the role and risk profile of every device.

Learn More

Solutions
Gain visibility, control the unknowns, and ensure compliance with confidence.
Regulatory Compliance
Ensure compliance and stay resilient against evolving cyber threats.
- CSRB
- DORA
- NIST CSF & 800-171
- NIS2
- NYDFS
- PCI DSS

Analyst Perspective: GigaOm 2026 Radar for OT Security

This new report evaluates security solutions designed specifically for industrial environments, focusing on purpose-built capabilities that can be safely deployed in fragile OT environments. runZero is positioned as a Challenger & Fast Mover in the Innovation/Platform Play quadrant. Read the report for GigaOm’s full take!

Read the Report

Resource Center
Dive into a treasure trove of resources to expand your exposure management knowledge.
runZero Research
Explore the world of exposure management through the runZero lens.
runZero Blog
See what's happening at runZero and read up on the latest ideas, opinions, and articles from our experts and researchers.
Support Resources
Everything you need to maximize your experience with the runZero Platform.

Watch the runZero Day replay!

The inaugural runZero Day livestream was one for the books! From the inner workings of the CVE program and modern cyber journalism to the realities of OT security and the startup investment ecosystem, our wonderful guests helped us cover the trends that are defining our industry.

Watch the Replay

Our Customers
Our customers are everything. We're super proud to be trusted by leading organizations around the globe to help them improve their security.
Case Studies
See how runZero has empowered security teams to take control of their networks, uncover their unknowns, and save significant time and money.
Testimonials
Read reviews of the runZero Platform and see how teams have improved their security with our technology.

Case Study: How runZero established North Carolina’s K–12 exposure management program

Learn how runZero became the foundation for exposure management across 343 North Carolina Public School Units.

Read the Case Study

About Us
Wondering who the heck are these people? Meet the team and get the story behind runZero... once upon a time called Rumble.
Events
Track down runZero Yetis in the wild! Join us in-person or virtually at one of our upcoming events.
Investors
Meet the cybersecurity investors, trailblazers, and innovators who help us navigate our journey and the evolving security landscape.
Newsroom
Read the latest articles, announcements, and press releases from runZero.
Careers
Want to join our forces? We're looking for bright minds and passionate souls who want to write the next chapter in exposure management.

Join us on July 15 for the next exciting episode!

Every month, our research team does a deep dive into the ones and zeros behind all things exposure, from new threats and risky devices to the most secretive, silent, and unheard of vulnerabilities hiding in IT, OT, IoT, remote, cloud, and mobile environments – see you there!

Register Now

Infinity Partner Program
See how we can work together to provide best-in-class security solutions and outcomes for our joint customers.
Partner Directory
Explore our directory of trusted (and awesome) partners.
Partner Sign In
Sign in to our Infinity Partner Portal.

Join our Infinity Partner Program

Designed with a partner-first mindset, the runZero Infinity Partner Program offers incredibly valuable resources, relationships, and rewards to partners who choose to grow their business with us.

Become a runZero Partner

On This Page:

Latest n8n vulnerability: CVE-2026-21858
What is n8n?
What is the impact?
Are updates or workarounds available?
How to find potentially vulnerable systems with runZero

How to find n8n on your network

Rob King

|

Updated January 9, 2026, 12:56am EST

Latest n8n vulnerability: CVE-2026-21858 #

Cyera has reported a vulnerability in the n8n workflow automation tool. This flaw allows a remote, unauthenticated attacker to execute arbitrary code on the vulnerable system. Successful exploitation could allow complete system compromise.

This vulnerability has been assigned CVE-2026-21858 and is rated highly critical has a CVSS score of 10.0.

The following versions are affected

n8n versions 1.65.0 up to but not including 1.121.0

What is n8n? #

n8n is an AI-centric workflow automation tool.

What is the impact? #

Successful exploitation of this vulnerability would allow an adversary to execute arbitrary code on the vulnerable host, potentially leading to complete system compromise.

Are updates or workarounds available? #

n8n.io has released version 1.121.0 of n8n. Users are urged to update as quickly as possible.

How to find potentially vulnerable systems with runZero #

From the Services inventory, use the following query to locate potentially vulnerable assets:

_asset.protocol:="http" AND protocol:="http" AND html.title:="n8n.io%"

Written by Rob King

Rob King is the Director of Applied Research at runZero. Over his career Rob has served as a senior researcher with KoreLogic, the architect for TippingPoint DVLabs, and helped get several startups off the ground. Rob helped design SC Magazine's Data Leakage Prevention Product of the Year for 2010, and was awarded the 3Com Innovator of the Year Award in 2009. He has been invited to speak at BlackHat, Shmoocon, SANS Network Security, and USENIX.

More about Rob King

Explore more runZero

Product

Announcing runZero 4.9: Unmask attack paths and segmentation gaps with advanced topology and deep OT device intelligence

With runZero 4.9, visualize attacker lateral movement, harden network choke points, gain deep OT telemetry to secure converged environments, and more.

Webcasts

runZero Hour, Ep. 30: Segmentation - stop assuming & start verifying with runZero 4.9

See runZero 4.9 in action! Join HD Moore and Tod Beardsley to learn how interactive attack path mapping and advanced OT intelligence expose hidden...

Product Videos

runZero 4.9: Advanced topology, attack path mapping, & deep OT intelligence

With runZero 4.9, visualize attacker lateral movement, harden network choke points, gain deep OT telemetry to secure converged environments, and more.

runZero Perspective

Dawn of the apex agentic adversary

When agentic AI can weaponize exploits in seconds, visibility is everything. Stop the predator with runZero’s exposure management for the AI-attack...

Webcasts

Defending in the shadow era: when the CVE feed goes dark

HD Moore walks through the three eras of vulnerability management: the predictable cycles era, the triage ara of AI-scale discovery, and now the...

Webcasts

runZero Hour, Ep. 31: The New Rules of Risk: EPSS v5 and Agentic Adversaries

In this episode, learn how your security team can use EPSS v5 to inform daily risk decisions in a world increasingly targeted by the apex agentic...

Webcasts

Beyond the Zero-Day: Mapping the network attackers actually see

Breaches are inevitable. Learn from HD Moore how attackers exploit the seams between IT, IoT, and OT networks — and how to fix the segmentation...

Podcasts

Risky Biz Interview: Navigating the AI vibe shift with HD Moore

runZero Founder and CEO HD Moore drops by in this week's Risky Biz sponsor interview to talk about the concerning AI vibe shift and what to do...

See Results in Minutes

See & secure your total attack surface. Even the unknowns & unmanageable.

Try runZero for Free

runZero CAASM

© Copyright 2026 runZero, Inc. All Rights Reserved