<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://blog.securelayer7.net/cve-2026-63077-teamcity-rce/</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-28T10:46:12.000Z</news:publication_date>
      <news:title>CVE-2026-63077: XStream Deserialization in JetBrains TeamCity&amp;#8217;s Agent Polling Protocol Enables Pre-Auth RCE</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://blog.securelayer7.net/log4j2-marshalledobject-deserialization-bypass-to-rce/</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-26T17:37:45.000Z</news:publication_date>
      <news:title>Log4j2 MarshalledObject Deserialization Bypass to RCE</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/crossplane-xpkg-cachedclient-toctou-signature-bypass</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-27T17:28:58.492Z</news:publication_date>
      <news:title>Crossplane xpkg.CachedClient TOCTOU Signature Verification Bypass</news:title>
      <news:keywords>Security Research</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-54736-phalcon-crypt-decrypt-hmac-timing-side-channel</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-28T16:10:43.861Z</news:publication_date>
      <news:title>CVE-2026-54736: Phalcon Crypt::decrypt HMAC Timing Side-Channel</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-54754-klever-go-marketplace-royalty-referral-klv-mint</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-28T16:31:01.279Z</news:publication_date>
      <news:title>CVE-2026-54754: klever-go Marketplace Settlement Integer Underflow Mints KLV</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-54755-klever-go-split-royalty-integer-overflow-klv-mint</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-28T16:29:23.140Z</news:publication_date>
      <news:title>CVE-2026-54755: klever-go Integer Overflow in Split-Royalty Validation Enables Unbounded KLV Minting</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-54757-compliance-trestle-ssti-markdown-include</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-28T16:34:54.429Z</news:publication_date>
      <news:title>CVE-2026-54757: compliance-trestle Server-Side Template Injection via Markdown Include Tags</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-54788-datadog-opentelemetry-tracestate-dos</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-28T16:49:00.694Z</news:publication_date>
      <news:title>CVE-2026-54788: datadog-opentelemetry Unbounded tracestate Parsing DoS</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-55108-kubevela-terraform-remote-symlink-dos</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-28T16:36:18.132Z</news:publication_date>
      <news:title>CVE-2026-55108: KubeVela Terraform Remote Loader Symlink DoS</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/cve-2026-57584-phalcon-router-redos-catastrophic-backtracking</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-28T16:09:04.939Z</news:publication_date>
      <news:title>CVE-2026-57584: Phalcon Router Catastrophic Backtracking (ReDoS)</news:title>
      <news:keywords>CVE Advisory</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://securelayer7.net/lab/librenms-stored-xss-snmp-syslog-legacy-templates</loc>
    <news:news>
      <news:publication>
        <news:name>SecureLayer7</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-26T18:08:59.280Z</news:publication_date>
      <news:title>LibreNMS Stored XSS via Unescaped SNMP and Syslog Data in Legacy Templates</news:title>
      <news:keywords>Security Research</news:keywords>
    </news:news>
  </url>
</urlset>