https://blog.securelayer7.net/external-attack-surface-management-easm/ SecureLayer7 en 2026-07-07T12:08:47.000Z External Attack Surface Management (EASM): A Practical Guide Security News https://blog.securelayer7.net/prompt-injection-attacks/ SecureLayer7 en 2026-07-07T08:26:03.000Z Prompt Injection Attacks: Risks, Examples & Prevention Security News https://blog.securelayer7.net/cve-2026-44963-veeam-backup-authenticated-rce-binaryformatter-bypass/ SecureLayer7 en 2026-07-06T07:14:03.000Z CVE-2026-44963: Veeam Backup – Authenticated Domain User to RCE via BinaryFormatter Blacklist Bypass CVE Advisory https://securelayer7.net/lab/9router-unauthenticated-provider-crud-api-key-leak SecureLayer7 en 2026-07-06T21:35:25.826Z 9router: Unauthenticated CRUD on Provider API and Full API Key Leak Security Research https://securelayer7.net/lab/cve-2022-46292-openbabel-mopac-unit-cell-translation-oob-write SecureLayer7 en 2026-07-06T16:47:54.581Z CVE-2022-46292: Open Babel MOPAC Output Parser Out-of-Bounds Write (UNIT CELL TRANSLATION) CVE Advisory https://securelayer7.net/lab/cve-2026-27823-egroupware-smallpart-rce-auth-bypass-path-traversal SecureLayer7 en 2026-07-07T13:09:48.723Z CVE-2026-27823: EGroupware SmallPART Remote Code Execution via Auth Bypass and Path Traversal CVE Advisory https://securelayer7.net/lab/cve-2026-33655-new-api-ssrf-hostname-bypass SecureLayer7 en 2026-07-07T13:09:06.627Z CVE-2026-33655: new-api SSRF Protection Bypass via Unresolved Hostname CVE Advisory https://securelayer7.net/lab/cve-2026-34151-xwiki-skin-path-traversal-jetty12 SecureLayer7 en 2026-07-07T13:08:35.174Z CVE-2026-34151: XWiki Platform Old Core Path Traversal via /skin/ Endpoint on Jetty 12 CVE Advisory https://securelayer7.net/lab/cve-2026-35338-uu-chmod-preserve-root-bypass SecureLayer7 en 2026-07-06T17:47:53.358Z CVE-2026-35338: uu_chmod --preserve-root Bypass via Unresolved Path CVE Advisory https://securelayer7.net/lab/cve-2026-35341-uu-mkfifo-permission-overwrite-existing-file SecureLayer7 en 2026-07-06T22:07:56.927Z CVE-2026-35341: uu_mkfifo Unauthorized Permission Overwrite on Existing Files CVE Advisory https://securelayer7.net/lab/cve-2026-40187-egroupware-etemplate-eval-rce SecureLayer7 en 2026-07-07T13:07:57.344Z CVE-2026-40187: EGroupware Authenticated RCE via eTemplate eval Injection CVE Advisory https://securelayer7.net/lab/cve-2026-49445-cilium-envoy-admin-socket-world-accessible SecureLayer7 en 2026-07-06T17:07:56.761Z CVE-2026-49445: Cilium Envoy Admin Socket World-Accessible Permission Misconfiguration CVE Advisory https://securelayer7.net/lab/cve-2026-53486-xhmikosr-decompress-path-traversal-symlink-hardlink SecureLayer7 en 2026-07-06T20:49:55.820Z CVE-2026-53486: @xhmikosr/decompress Path Traversal, Symlink Escape, and Setuid File Creation CVE Advisory https://securelayer7.net/lab/cve-2026-54496-halo2-gadgets-orchard-underconstrained-base-point SecureLayer7 en 2026-07-06T21:28:17.295Z CVE-2026-54496: halo2_gadgets Variable-Base Scalar Multiplication Under-Constrained Base Point CVE Advisory https://securelayer7.net/lab/cve-2026-54640-openremote-knxprotocol-xxe-file-read SecureLayer7 en 2026-07-06T21:11:50.073Z CVE-2026-54640: OpenRemote KNXProtocol XXE Arbitrary File Read CVE Advisory https://securelayer7.net/lab/cve-2026-54641-openremote-cross-realm-user-disclosure SecureLayer7 en 2026-07-06T21:36:50.661Z CVE-2026-54641: OpenRemote Manager Cross-Realm User Information Disclosure CVE Advisory https://securelayer7.net/lab/cve-2026-54760-langroid-sqlchatagent-pg-read-file-blocklist-bypass SecureLayer7 en 2026-07-06T20:49:05.522Z CVE-2026-54760: langroid SQLChatAgent pg_read_file Blocklist Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-54771-langroid-tool-injection-sender-bypass SecureLayer7 en 2026-07-06T20:47:55.181Z CVE-2026-54771: langroid Unauthorized Tool Invocation via User-Supplied JSON CVE Advisory https://securelayer7.net/lab/cve-2026-55075-coder-oidc-account-takeover-email-verified-bypass SecureLayer7 en 2026-07-06T21:10:44.328Z CVE-2026-55075: Coder OIDC Account Takeover via Email Fallback and email_verified Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55076-coder-oidc-email-verified-type-coercion-account-takeover SecureLayer7 en 2026-07-06T21:11:22.877Z CVE-2026-55076: Coder OIDC email_verified Type Coercion Authentication Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55426-linuxfabrik-lib-shell-exec-command-injection SecureLayer7 en 2026-07-06T21:30:33.104Z CVE-2026-55426: linuxfabrik-lib OS Command Injection via shell_exec CVE Advisory https://securelayer7.net/lab/cve-2026-55428-coder-tailnet-allowedips-route-hijacking SecureLayer7 en 2026-07-06T21:08:11.491Z CVE-2026-55428: Coder Tailnet Coordinator Route Hijacking via Unvalidated AllowedIPs CVE Advisory https://securelayer7.net/lab/cve-2026-55431-coder-cli-session-token-exfiltration-external-app SecureLayer7 en 2026-07-06T21:31:58.658Z CVE-2026-55431: Coder CLI Session Token Exfiltration via External App URLs CVE Advisory https://securelayer7.net/lab/cve-2026-55500-9router-database-export-import-credential-theft SecureLayer7 en 2026-07-06T21:48:43.457Z CVE-2026-55500: 9router Unprotected Database Export/Import Credential Theft CVE Advisory https://securelayer7.net/lab/cve-2026-55501-9router-x-forwarded-for-rate-limit-bypass SecureLayer7 en 2026-07-06T21:48:00.817Z CVE-2026-55501: 9router Login Rate-Limit Bypass via X-Forwarded-For Spoofing CVE Advisory https://securelayer7.net/lab/cve-2026-55615-langroid-neo4jchatagent-cypher-injection-rce SecureLayer7 en 2026-07-06T21:34:48.915Z CVE-2026-55615: langroid Neo4jChatAgent Prompt-to-Cypher Injection (RCE) CVE Advisory https://securelayer7.net/lab/cve-2026-55786-flyto-core-unauthenticated-os-command-injection-mcp SecureLayer7 en 2026-07-06T17:48:24.781Z CVE-2026-55786: flyto-core Unauthenticated OS Command Injection via HTTP MCP CVE Advisory https://securelayer7.net/lab/cve-2026-55787-flyto-core-ssrf-ipv6-transition-bypass SecureLayer7 en 2026-07-06T17:49:04.881Z CVE-2026-55787: flyto-core SSRF Guard Bypass via IPv6 Transition Addresses CVE Advisory https://securelayer7.net/lab/cve-2026-55790-craftcms-craftsupport-dom-xss-github-issue-title SecureLayer7 en 2026-07-06T21:34:04.844Z CVE-2026-55790: Craft CMS DOM XSS via Poisoned GitHub Issue Title in CraftSupport Widget CVE Advisory https://securelayer7.net/lab/cve-2026-55794-craftcms-twig-injection-referer-rce SecureLayer7 en 2026-07-06T21:49:21.564Z CVE-2026-55794: Craft CMS Authenticated RCE via Twig Injection in Referer Header CVE Advisory