https://securelayer7.net/lab/cve-2026-11745-centraldogma-ssh-host-key-mitm SecureLayer7 en 2026-09-11T20:49:10.532Z CVE-2026-11745: centraldogma-server-mirror-git SSH Host Key Verification Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-11746-centraldogma-hardcoded-zookeeper-secret-cluster-takeover SecureLayer7 en 2026-09-11T20:50:30.535Z CVE-2026-11746: Central Dogma Hard-coded ZooKeeper Replication Secret Enables Cluster Takeover CVE Advisory https://securelayer7.net/lab/cve-2026-56825-shopper-collection-products-missing-authorization SecureLayer7 en 2026-09-11T21:50:26.289Z CVE-2026-56825: Shopper CollectionProducts Missing Authorization CVE Advisory https://securelayer7.net/lab/cve-2026-56827-shopper-filament-bulk-action-missing-authorization SecureLayer7 en 2026-09-11T21:08:55.804Z CVE-2026-56827: Shopper Framework Missing Authorization on Filament Bulk Actions CVE Advisory https://securelayer7.net/lab/cve-2026-56828-shopper-framework-livewire-privilege-escalation SecureLayer7 en 2026-09-11T21:54:58.838Z CVE-2026-56828: shopper/framework Privilege Escalation via Livewire Misconfigured Authorization CVE Advisory https://securelayer7.net/lab/cve-2026-56829-shopper-variantstock-missing-authorization-inventory-manipulation SecureLayer7 en 2026-09-11T21:51:37.206Z CVE-2026-56829: Shopper VariantStock Missing Authorization CVE Advisory https://securelayer7.net/lab/cve-2026-59148-mockoon-unauthenticated-admin-api-csrf SecureLayer7 en 2026-09-11T22:09:15.823Z CVE-2026-59148: @mockoon/commons-server Unauthenticated Admin API + Wildcard CORS CVE Advisory https://securelayer7.net/lab/cve-2026-59151-prowler-saml-cross-tenant-account-takeover SecureLayer7 en 2026-09-11T21:49:20.475Z CVE-2026-59151: Prowler SAML Cross-Tenant Account Takeover CVE Advisory https://securelayer7.net/lab/cve-2026-59960-argos-ci-core-branch-os-command-injection SecureLayer7 en 2026-09-10T23:05:10.011Z CVE-2026-59960: @argos-ci/core CI Branch Name OS Command Injection CVE Advisory https://securelayer7.net/lab/cve-2026-59965-payload-alt-text-plugin-authorization-bypass-overrideaccess SecureLayer7 en 2026-09-10T22:57:41.306Z CVE-2026-59965: @jhb.software/payload-alt-text-plugin Authorization Bypass via overrideAccess Omission CVE Advisory https://securelayer7.net/lab/cve-2026-59971-mysql-mcp-server-unauth-sql-execution-dns-rebinding SecureLayer7 en 2026-09-11T20:51:56.620Z CVE-2026-59971: mysql-mcp-server Unauthenticated SQL Execution via Missing Origin and Host Validation CVE Advisory https://securelayer7.net/lab/cve-2026-59973-mcp-from-openapi-ssrf-filter-bypass SecureLayer7 en 2026-09-11T22:10:28.749Z CVE-2026-59973: mcp-from-openapi OpenAPI $ref SSRF Filter Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-61534-yayson-prototype-pollution-jsonapi-store SecureLayer7 en 2026-09-11T22:28:51.427Z CVE-2026-61534: yayson Prototype Pollution via JSON:API Type Deserialization CVE Advisory https://securelayer7.net/lab/cve-2026-87011-open-webui-backchannel-logout-dos SecureLayer7 en 2026-09-10T23:03:55.015Z CVE-2026-87011: open-webui OIDC Back-Channel Logout Unauthenticated DoS CVE Advisory https://securelayer7.net/lab/cve-2026-87016-open-webui-oauth-subject-wildcard-auth-bypass SecureLayer7 en 2026-09-10T21:29:01.615Z CVE-2026-87016: Open WebUI OAuth Subject Wildcard Authentication Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-88004-traefik-trailer-header-sanitization-bypass SecureLayer7 en 2026-09-10T23:10:23.458Z CVE-2026-88004: Traefik Entrypoint Header Sanitization Bypass via HTTP Trailers CVE Advisory https://securelayer7.net/lab/cve-2026-88007-traefik-http3-ntlm-connection-reuse SecureLayer7 en 2026-09-10T23:11:35.952Z CVE-2026-88007: Traefik HTTP/3 NTLM Backend Connection Reuse CVE Advisory https://securelayer7.net/lab/cve-2026-88008-traefik-h2c-upgrade-middleware-bypass SecureLayer7 en 2026-09-10T23:09:12.428Z CVE-2026-88008: Traefik h2c Upgrade Middleware Bypass via HTTP Request Smuggling CVE Advisory https://securelayer7.net/lab/cve-2026-88009-traefik-opaque-request-target-routing-bypass SecureLayer7 en 2026-09-10T23:15:07.343Z CVE-2026-88009: Traefik HTTP Request Smuggling via Rootless Opaque Request-Target CVE Advisory https://securelayer7.net/lab/cve-2026-88017-rclone-ftp-auth-proxy-cross-session-credential-overwrite SecureLayer7 en 2026-09-10T22:49:51.854Z CVE-2026-88017: rclone FTP Auth-Proxy Cross-Session Credential Overwrite CVE Advisory https://securelayer7.net/lab/cve-2026-88018-rclone-serve-s3-sigv4-auth-bypass-empty-secret SecureLayer7 en 2026-09-10T23:02:20.476Z CVE-2026-88018: rclone serve s3 SigV4 Authentication Bypass via Empty Secret CVE Advisory https://securelayer7.net/lab/cve-2026-88044-rclone-rc-auth-proxy-bypass-ftp-s3 SecureLayer7 en 2026-09-10T22:55:44.464Z CVE-2026-88044: rclone RC Per-Server Auth-Proxy Bypass (FTP/S3) CVE Advisory https://securelayer7.net/lab/cve-2026-88045-rclone-serve-s3-multipart-memory-exhaustion SecureLayer7 en 2026-09-10T22:51:06.483Z CVE-2026-88045: rclone serve s3 Multipart Memory Exhaustion via Declared Content-Length CVE Advisory https://securelayer7.net/lab/cve-2026-88062-omniroute-acp-agent-unauthenticated-rce SecureLayer7 en 2026-09-10T21:30:22.248Z CVE-2026-88062: omniroute Unauthenticated Remote Code Execution via Custom ACP Agent CVE Advisory https://securelayer7.net/lab/mistralrs-server-core-unbounded-media-fetch-dos SecureLayer7 en 2026-09-10T22:08:56.939Z mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS Security Research