https://blog.securelayer7.net/shadow-ai/ SecureLayer7 en 2026-08-25T08:22:23.000Z Shadow AI: Risks, How It Works and How to Protect Security News https://securelayer7.net/lab/cve-2026-54049-sakai-conversations-stored-xss-unsanitized-messages SecureLayer7 en 2026-08-24T19:50:19.285Z CVE-2026-54049: Sakai Conversations Stored XSS via Unsanitized Topic and Post Messages CVE Advisory https://securelayer7.net/lab/cve-2026-54623-django-cms-move-plugin-cyclic-reparenting-dos SecureLayer7 en 2026-08-24T20:28:49.690Z CVE-2026-54623: django-cms Plugin Move Endpoint Cyclic Reparenting DoS CVE Advisory https://securelayer7.net/lab/cve-2026-55477-3x-ui-arbitrary-file-write-xray-log-path SecureLayer7 en 2026-08-24T21:08:56.562Z CVE-2026-55477: 3X-UI Authenticated Arbitrary File Write via Xray Log Path CVE Advisory https://securelayer7.net/lab/cve-2026-55523-praisonaiagents-web-crawl-ssrf-redirect-bypass SecureLayer7 en 2026-08-25T14:29:01.586Z CVE-2026-55523: praisonaiagents web_crawl SSRF via Unvalidated Redirect Target CVE Advisory https://securelayer7.net/lab/cve-2026-55524-praisonaiagents-ssrf-web-crawl-redirect-dns-rebinding SecureLayer7 en 2026-08-25T14:49:14.600Z CVE-2026-55524: praisonaiagents SSRF via Redirect and DNS Rebinding in web_crawl CVE Advisory https://securelayer7.net/lab/cve-2026-55525-praisonaiagents-web-crawl-ssrf-redirect-bypass SecureLayer7 en 2026-08-25T14:09:13.909Z CVE-2026-55525: praisonaiagents web_crawl SSRF via Redirect Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55526-praisonaiagents-ssrf-dns-bypass-spider-tools SecureLayer7 en 2026-08-25T14:51:00.533Z CVE-2026-55526: praisonaiagents SSRF Protection Bypass via Wildcard DNS Hostname CVE Advisory https://securelayer7.net/lab/cve-2026-55528-praisonaiagents-agentserver-missing-authentication SecureLayer7 en 2026-08-25T14:52:09.340Z CVE-2026-55528: praisonaiagents AgentServer Missing Authentication CVE Advisory https://securelayer7.net/lab/cve-2026-55532-praisonai-mcp-origin-csrf-bypass SecureLayer7 en 2026-08-25T15:31:08.480Z CVE-2026-55532: PraisonAI MCP HTTP Server Origin Validation Bypass (CSRF) CVE Advisory https://securelayer7.net/lab/cve-2026-55536-praisonai-websocket-origin-regex-bypass SecureLayer7 en 2026-08-25T15:30:01.275Z CVE-2026-55536: PraisonAI WebSocket Origin Validation Bypass via Unanchored Regex CVE Advisory https://securelayer7.net/lab/cve-2026-55537-praisonai-webhook-ssrf-dns-fail-open-toctou SecureLayer7 en 2026-08-25T15:10:11.732Z CVE-2026-55537: PraisonAI Webhook SSRF via DNS Fail-Open and TOCTOU Race CVE Advisory https://securelayer7.net/lab/cve-2026-55538-praisonai-serve-agents-api-key-auth-bypass SecureLayer7 en 2026-08-25T15:11:31.693Z CVE-2026-55538: PraisonAI serve agents --api-key Authentication Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55541-praisonai-serve-api-key-missing-authorization SecureLayer7 en 2026-08-25T15:08:58.250Z CVE-2026-55541: PraisonAI serve --api-key Flag Missing Authorization CVE Advisory https://securelayer7.net/lab/cve-2026-55546-qwed-mcp-sympy-parse-expr-rce SecureLayer7 en 2026-08-25T15:28:43.436Z CVE-2026-55546: qwed-mcp Remote Code Execution via Unsafe SymPy parse_expr() CVE Advisory https://securelayer7.net/lab/postgres-protocol-scram-iteration-count-dos SecureLayer7 en 2026-08-24T19:49:03.531Z postgres-protocol: Unbounded SCRAM Iteration Count CPU Exhaustion DoS Security Research