https://blog.securelayer7.net/cve-2026-63030-cve-2026-60137-wp2shell-pre-auth-rce-in-wordpress-core-via-rest-batch-route-confusion-and-sql-injection/ SecureLayer7 en 2026-07-18T19:48:00.000Z CVE-2026-63030 & CVE-2026-60137: wp2shell Pre-Auth RCE in WordPress Core via REST Batch-Route Confusion and SQL Injection CVE Advisory https://blog.securelayer7.net/network-vulnerability-assessment/ SecureLayer7 en 2026-07-17T11:12:53.000Z Network Vulnerability Assessment: Securing Cloud Network Security News https://securelayer7.net/lab/cve-2026-11400-aws-advanced-jdbc-wrapper-privilege-escalation-search-path SecureLayer7 en 2026-07-17T18:48:44.665Z CVE-2026-11400: aws-advanced-jdbc-wrapper Privilege Escalation via Unqualified PostgreSQL Function Calls CVE Advisory https://securelayer7.net/lab/cve-2026-27771-gitea-container-registry-auth-bypass SecureLayer7 en 2026-07-17T19:08:14.124Z CVE-2026-27771: Gitea Container Registry Authentication Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-53597-prompty-core-javascript-frontmatter-code-injection SecureLayer7 en 2026-07-17T20:08:01.263Z CVE-2026-53597: @prompty/core Arbitrary Code Execution via JavaScript Frontmatter CVE Advisory https://securelayer7.net/lab/cve-2026-54234-vllm-speculative-decoding-recovered-token-dos SecureLayer7 en 2026-07-17T17:29:20.274Z CVE-2026-54234: vLLM Remote DoS via Invalid Recovered Token Reinjection in Speculative Decoding CVE Advisory https://securelayer7.net/lab/cve-2026-54547-meta-ads-mcp-auth-bypass-x-pipeboard-token SecureLayer7 en 2026-07-17T19:08:54.059Z CVE-2026-54547: meta-ads-mcp Authentication Bypass via X-Pipeboard-Token Header CVE Advisory https://securelayer7.net/lab/cve-2026-54549-meta-ads-mcp-ssrf-upload-ad-image SecureLayer7 en 2026-07-17T19:09:35.178Z CVE-2026-54549: meta-ads-mcp Server-Side Request Forgery in upload_ad_image CVE Advisory https://securelayer7.net/lab/cve-2026-54552-sh-incomplete-privilege-drop-supplementary-groups SecureLayer7 en 2026-07-17T18:48:04.281Z CVE-2026-54552: sh Incomplete Privilege Drop via _uid (Supplementary Groups Not Cleared) CVE Advisory https://securelayer7.net/lab/cve-2026-54567-flask-reuploaded-extension-denylist-case-folding-bypass SecureLayer7 en 2026-07-17T20:28:08.789Z CVE-2026-54567: Flask-Reuploaded Extension Denylist Bypass via Case-Folding Asymmetry CVE Advisory https://securelayer7.net/lab/cve-2026-55177-cloudtak-esri-ssrf-authenticated SecureLayer7 en 2026-07-17T21:48:11.075Z CVE-2026-55177: CloudTAK Authenticated Full-Read SSRF in /api/esri Routes CVE Advisory https://securelayer7.net/lab/skipper-opa-oversized-content-length-policy-bypass SecureLayer7 en 2026-07-17T22:08:04.910Z Skipper opaAuthorizeRequestWithBody OPA Policy Bypass via Oversized Content-Length Security Research