https://blog.securelayer7.net/ai-agent-red-teaming-obfuscated-prompt-injection/ SecureLayer7 en 2026-08-17T19:15:05.000Z We Red-Teamed an AI Agent: 54% of Prompt-Injection Probes Got Past Its Defenses Security News https://securelayer7.net/lab/cve-2026-47683-vm2-buffer-concat-alloclimit-bypass-dos SecureLayer7 en 2026-08-17T18:08:54.360Z CVE-2026-47683: vm2 bufferAllocLimit DoS Bypass via Buffer.concat and Buffer.from CVE Advisory https://securelayer7.net/lab/cve-2026-47686-vm2-error-cause-sandbox-escape-rce SecureLayer7 en 2026-08-17T18:04:34.818Z CVE-2026-47686: vm2 Missing Error.cause Sanitization Sandbox Escape to RCE CVE Advisory https://securelayer7.net/lab/cve-2026-47698-vm2-sandbox-breakout-indirect-call-proto-mutation SecureLayer7 en 2026-08-17T17:52:05.204Z CVE-2026-47698: vm2 Sandbox Breakout via Indirect Call Proto Mutation CVE Advisory https://securelayer7.net/lab/cve-2026-53728-medplum-external-auth-open-redirect-code-leak SecureLayer7 en 2026-08-17T13:49:12.059Z CVE-2026-53728: @medplum/core Open Redirect via Prefix-Matched Redirect URI in External Auth Callback CVE Advisory https://securelayer7.net/lab/cve-2026-54284-sqlparse-tokenlist-quadratic-cpu-dos SecureLayer7 en 2026-08-17T18:01:39.597Z CVE-2026-54284: sqlparse TokenList O(n*depth) CPU Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-55090-etherpad-stored-xss-html-export-attribute-pool SecureLayer7 en 2026-08-17T18:03:06.805Z CVE-2026-55090: Etherpad Stored XSS via Unescaped HTML Export Attribute Values CVE Advisory https://securelayer7.net/lab/cve-2026-55158-conflibot-command-injection-branch-name-pull-request-target SecureLayer7 en 2026-08-17T13:50:52.266Z CVE-2026-55158: conflibot OS Command Injection via Pull Request Branch Name CVE Advisory https://securelayer7.net/lab/cve-2026-59893-sqlparse-redos-dollar-quote-multiline-comment SecureLayer7 en 2026-08-17T17:57:53.140Z CVE-2026-59893: sqlparse ReDoS via Dollar-Quoted and Multiline-Comment Regexes CVE Advisory https://securelayer7.net/lab/cve-2026-59902-netty-sctp-memory-exhaustion-oom SecureLayer7 en 2026-08-17T17:55:09.824Z CVE-2026-59902: netty-transport-sctp SctpMessageCompletionHandler Memory Exhaustion CVE Advisory https://securelayer7.net/lab/cve-2026-64859-new-api-user-list-access-token-disclosure SecureLayer7 en 2026-08-17T16:55:04.359Z CVE-2026-64859: new-api User List API Leaks Root Access Token CVE Advisory https://securelayer7.net/lab/cve-2026-64868-new-api-webhook-dos-unbounded-body SecureLayer7 en 2026-08-17T16:52:06.431Z CVE-2026-64868: new-api Unauthenticated Webhook DoS via Unbounded Body Read CVE Advisory https://securelayer7.net/lab/cve-2026-68518-glances-action-template-sanitizer-bypass-cross-field-command-inje SecureLayer7 en 2026-08-17T16:49:22.549Z CVE-2026-68518: glances Action-Template Sanitizer Bypass via Cross-Field Shell-Operator Reconstruction CVE Advisory https://securelayer7.net/lab/cve-2026-68519-glances-disable-config-exec-bypass-alert-action-command-injection SecureLayer7 en 2026-08-17T17:30:37.651Z CVE-2026-68519: Glances --disable-config-exec Bypass via On-Alert Action OS Command Injection CVE Advisory https://securelayer7.net/lab/cve-2026-71479-new-api-integer-overflow-quota-billing-self-credit SecureLayer7 en 2026-08-17T16:50:43.760Z CVE-2026-71479: new-api Integer Overflow in Quota Billing Yields Negative Charges CVE Advisory https://securelayer7.net/lab/cve-2026-71491-sqlparse-quadratic-dos-group-comments SecureLayer7 en 2026-08-17T17:29:06.190Z CVE-2026-71491: sqlparse Quadratic DoS in group_comments CVE Advisory https://securelayer7.net/lab/uniget-cli-inverted-signature-guard-metadata-rce SecureLayer7 en 2026-08-17T17:56:25.494Z uniget CLI: Inverted Signature-Guard Condition Allows Unsigned Metadata RCE Security Research https://securelayer7.net/lab/vm2-arraybuffer-bufferalloclimit-bypass-dos SecureLayer7 en 2026-08-17T17:49:12.890Z vm2 Memory Exhaustion DoS via ArrayBuffer bufferAllocLimit Bypass Security Research https://securelayer7.net/lab/vm2-nodejs-sandbox-os-dns-host-process-escape SecureLayer7 en 2026-08-17T17:50:39.644Z vm2: NodeVM builtin wildcard exposes os and dns host-process read/write primitives Security Research