https://blog.securelayer7.net/red-team-assessment-providers/ SecureLayer7 en 2026-09-15T10:06:24.000Z The 14 Best Red Team Assessment Providers in 2026 Security News https://securelayer7.net/lab/cve-2026-56668-zitadel-token-exchange-privilege-escalation SecureLayer7 en 2026-09-14T21:49:07.385Z CVE-2026-56668: ZITADEL OAuth2 Token Exchange Missing Authorization CVE Advisory https://securelayer7.net/lab/cve-2026-59178-esphome-device-builder-auth-bypass-env-rename SecureLayer7 en 2026-09-14T18:29:01.320Z CVE-2026-59178: esphome-device-builder Silent Authentication Bypass on Upgrade CVE Advisory https://securelayer7.net/lab/cve-2026-61544-libp2p-quic-certificate-expiry-panic-dos SecureLayer7 en 2026-09-15T20:14:54.826Z CVE-2026-61544: libp2p-quic Remote Panic via Certificate Expiry Race CVE Advisory https://securelayer7.net/lab/cve-2026-61559-mcp-gitlab-ssrf-header-credential-theft SecureLayer7 en 2026-09-15T21:08:58.346Z CVE-2026-61559: @zereight/mcp-gitlab Server-Side Request Forgery via X-GitLab-API-URL Header CVE Advisory https://securelayer7.net/lab/cve-2026-61568-mcp-gitlab-dns-rebinding-host-origin SecureLayer7 en 2026-09-15T21:10:18.299Z CVE-2026-61568: @zereight/mcp-gitlab DNS Rebinding via Missing Host/Origin Validation CVE Advisory https://securelayer7.net/lab/cve-2026-69202-http4s-ember-http2-unbounded-inbound-body-buffering SecureLayer7 en 2026-09-15T20:30:19.319Z CVE-2026-69202: http4s Ember HTTP/2 Unbounded Inbound Body Buffering DoS CVE Advisory https://securelayer7.net/lab/cve-2026-69203-http4s-ember-http2-max-concurrent-streams-dos SecureLayer7 en 2026-09-15T20:29:02.307Z CVE-2026-69203: http4s Ember HTTP/2 Unbounded Stream Allocation DoS CVE Advisory https://securelayer7.net/lab/cve-2026-69204-http4s-ember-clte-request-smuggling SecureLayer7 en 2026-09-15T20:24:19.434Z CVE-2026-69204: http4s Ember CL.TE HTTP Request Smuggling CVE Advisory https://securelayer7.net/lab/cve-2026-69205-http4s-ember-transfer-encoding-smuggling SecureLayer7 en 2026-09-15T20:23:10.603Z CVE-2026-69205: http4s Ember Transfer-Encoding Case-Sensitive Parsing HTTP Request Smuggling CVE Advisory https://securelayer7.net/lab/cve-2026-69208-http4s-digestauth-nonce-map-dos SecureLayer7 en 2026-09-15T20:21:51.134Z CVE-2026-69208: http4s DigestAuth Nonce Map Unbounded Growth (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-69213-http4s-ember-http2-unbounded-outbound-frame-queue SecureLayer7 en 2026-09-15T20:16:14.370Z CVE-2026-69213: http4s Ember HTTP/2 Unbounded Outbound Frame Queue DoS CVE Advisory https://securelayer7.net/lab/cve-2026-69218-http4s-ember-http2-continuation-flood-dos SecureLayer7 en 2026-09-15T20:12:09.190Z CVE-2026-69218: http4s Ember HTTP/2 Unbounded CONTINUATION Frame Memory Exhaustion CVE Advisory https://securelayer7.net/lab/cve-2026-88975-http4s-ember-http2-frame-size-dos SecureLayer7 en 2026-09-15T20:09:15.789Z CVE-2026-88975: http4s Ember HTTP/2 Frame Size Memory Exhaustion CVE Advisory https://securelayer7.net/lab/mcp-gitlab-graphql-read-only-bypass-unauth-transport-session-dos SecureLayer7 en 2026-09-15T21:15:15.819Z @zereight/mcp-gitlab: GraphQL Read-Only Bypass, Unauthenticated Transports, and Session-Exhaustion DoS Security Research