https://blog.securelayer7.net/cve-2026-63077-teamcity-rce/ SecureLayer7 en 2026-08-28T10:46:12.000Z CVE-2026-63077: XStream Deserialization in JetBrains TeamCity’s Agent Polling Protocol Enables Pre-Auth RCE CVE Advisory https://securelayer7.net/lab/crossplane-xpkg-cachedclient-toctou-signature-bypass SecureLayer7 en 2026-08-27T17:28:58.492Z Crossplane xpkg.CachedClient TOCTOU Signature Verification Bypass Security Research https://securelayer7.net/lab/cve-2026-54736-phalcon-crypt-decrypt-hmac-timing-side-channel SecureLayer7 en 2026-08-28T16:10:43.861Z CVE-2026-54736: Phalcon Crypt::decrypt HMAC Timing Side-Channel CVE Advisory https://securelayer7.net/lab/cve-2026-54754-klever-go-marketplace-royalty-referral-klv-mint SecureLayer7 en 2026-08-28T16:31:01.279Z CVE-2026-54754: klever-go Marketplace Settlement Integer Underflow Mints KLV CVE Advisory https://securelayer7.net/lab/cve-2026-54755-klever-go-split-royalty-integer-overflow-klv-mint SecureLayer7 en 2026-08-28T16:29:23.140Z CVE-2026-54755: klever-go Integer Overflow in Split-Royalty Validation Enables Unbounded KLV Minting CVE Advisory https://securelayer7.net/lab/cve-2026-54757-compliance-trestle-ssti-markdown-include SecureLayer7 en 2026-08-28T16:34:54.429Z CVE-2026-54757: compliance-trestle Server-Side Template Injection via Markdown Include Tags CVE Advisory https://securelayer7.net/lab/cve-2026-54788-datadog-opentelemetry-tracestate-dos SecureLayer7 en 2026-08-28T16:49:00.694Z CVE-2026-54788: datadog-opentelemetry Unbounded tracestate Parsing DoS CVE Advisory https://securelayer7.net/lab/cve-2026-55066-vikunja-kanban-idor-task-bucket SecureLayer7 en 2026-08-28T17:11:14.717Z CVE-2026-55066: Vikunja Kanban Move-Task IDOR (Cross-Tenant Task Read and Write) CVE Advisory https://securelayer7.net/lab/cve-2026-55108-kubevela-terraform-remote-symlink-dos SecureLayer7 en 2026-08-28T16:36:18.132Z CVE-2026-55108: KubeVela Terraform Remote Loader Symlink DoS CVE Advisory https://securelayer7.net/lab/cve-2026-55245-bifrost-ispublicip-ssrf-nat64-cgnat-bypass SecureLayer7 en 2026-08-28T18:29:05.330Z CVE-2026-55245: Bifrost isPublicIP SSRF Deny-List Bypass via NAT64, 6to4, and CGNAT CVE Advisory https://securelayer7.net/lab/cve-2026-55460-snipe-it-bulk-user-delete-authorization-bypass SecureLayer7 en 2026-08-28T18:10:32.712Z CVE-2026-55460: Snipe-IT Authorization Bypass on Bulk User Delete CVE Advisory https://securelayer7.net/lab/cve-2026-55511-yamcs-streamsql-aggregate-column-injection-rce SecureLayer7 en 2026-08-28T17:09:14.349Z CVE-2026-55511: yamcs-core Authenticated RCE via StreamSQL Aggregate Column-Name Injection CVE Advisory https://securelayer7.net/lab/cve-2026-55516-snipe-it-maintenance-asset-id-authorization-bypass SecureLayer7 en 2026-08-28T18:08:48.316Z CVE-2026-55516: Snipe-IT Cross-Company Asset Maintenance Re-Parenting via API CVE Advisory https://securelayer7.net/lab/cve-2026-55521-yamcs-core-api-missing-authorization SecureLayer7 en 2026-08-28T17:31:13.386Z CVE-2026-55521: Yamcs Core API Multiple Missing Authorization Checks CVE Advisory https://securelayer7.net/lab/cve-2026-55552-yamcs-unauthenticated-directory-traversal-double-slash SecureLayer7 en 2026-08-28T17:30:01.007Z CVE-2026-55552: Yamcs Unauthenticated Directory Traversal via Double-Slash URI CVE Advisory https://securelayer7.net/lab/cve-2026-55559-yamcs-core-template-yaml-injection-rce SecureLayer7 en 2026-08-28T17:28:53.535Z CVE-2026-55559: yamcs-core Remote Code Execution via Instance Template YAML Injection CVE Advisory https://securelayer7.net/lab/cve-2026-57584-phalcon-router-redos-catastrophic-backtracking SecureLayer7 en 2026-08-28T16:09:04.939Z CVE-2026-57584: Phalcon Router Catastrophic Backtracking (ReDoS) CVE Advisory