https://blog.securelayer7.net/log4j2-marshalledobject-deserialization-bypass-to-rce/ SecureLayer7 en 2026-08-26T17:37:45.000Z Log4j2 MarshalledObject Deserialization Bypass to RCE CVE Advisory https://blog.securelayer7.net/autonomous-penetration-testing-complete-guide-2026/ SecureLayer7 en 2026-08-25T18:45:36.000Z Autonomous Penetration Testing: Complete Guide 2026 Security News https://securelayer7.net/lab/cve-2026-45018-chainlit-mcp-stdio-command-injection-rce SecureLayer7 en 2026-08-25T19:30:11.793Z CVE-2026-45018: Chainlit Unauthenticated Remote Code Execution via MCP stdio Command Injection CVE Advisory https://securelayer7.net/lab/cve-2026-45019-chainlit-mcp-ssrf-internal-network SecureLayer7 en 2026-08-25T19:29:02.230Z CVE-2026-45019: Chainlit SSRF via MCP SSE and Streamable-HTTP Transports CVE Advisory https://securelayer7.net/lab/cve-2026-48853-elixir-grpc-erlpack-unsafe-deserialization-rce SecureLayer7 en 2026-08-25T18:37:53.869Z CVE-2026-48853: erlang/grpc Unsafe Deserialization Leading to RCE and DoS CVE Advisory https://securelayer7.net/lab/cve-2026-48854-elixir-grpc-unbounded-body-memory-exhaustion SecureLayer7 en 2026-08-25T18:31:34.898Z CVE-2026-48854: elixir-grpc Unbounded Request Body Memory Exhaustion CVE Advisory https://securelayer7.net/lab/cve-2026-49757-ash-authentication-oauth2-oidc-account-takeover-email-spoofing SecureLayer7 en 2026-08-25T18:29:04.496Z CVE-2026-49757: ash_authentication OAuth2/OIDC Account Takeover via Email Spoofing CVE Advisory https://securelayer7.net/lab/cve-2026-53430-elixir-grpc-gzip-decompression-bomb-dos SecureLayer7 en 2026-08-25T18:30:13.786Z CVE-2026-53430: elixir-grpc Unbounded gzip Decompression Bomb (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-54511-logtape-syslog-crlf-log-injection SecureLayer7 en 2026-08-26T14:49:54.303Z CVE-2026-54511: @logtape/syslog CRLF Log Injection via Unescaped C0 Control Characters CVE Advisory https://securelayer7.net/lab/cve-2026-54523-kyverno-namespacedmutatingpolicy-generator-apply-namespace-bypass SecureLayer7 en 2026-08-26T14:29:52.469Z CVE-2026-54523: Kyverno NamespacedMutatingPolicy Missing Authorization in generator.apply() CVE Advisory https://securelayer7.net/lab/cve-2026-54556-http4s-ember-hpack-bomb-dos SecureLayer7 en 2026-08-26T14:31:24.780Z CVE-2026-54556: http4s-ember-core HTTP/2 HPACK Bomb Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-54563-cloudreve-webdav-path-traversal SecureLayer7 en 2026-08-26T15:30:05.907Z CVE-2026-54563: Cloudreve WebDAV Scoped Credential Path Traversal CVE Advisory https://securelayer7.net/lab/cve-2026-54569-senaite-core-unauth-rce-eval-injection-jsonapi SecureLayer7 en 2026-08-26T15:50:24.986Z CVE-2026-54569: senaite.core Unauthenticated Remote Code Execution via Eval Injection in JSON API CVE Advisory https://securelayer7.net/lab/cve-2026-54591-asyncssh-scp-path-traversal-arbitrary-file-write SecureLayer7 en 2026-08-26T15:49:03.822Z CVE-2026-54591: asyncssh SCP Client Path Traversal to Arbitrary File Write CVE Advisory https://securelayer7.net/lab/cve-2026-54606-suneditor-embed-plugin-dom-xss-script-src SecureLayer7 en 2026-08-26T15:28:54.402Z CVE-2026-54606: suneditor Embed Plugin DOM XSS via External Script Element CVE Advisory https://securelayer7.net/lab/cve-2026-55099-icalendar-component-equality-dos SecureLayer7 en 2026-08-25T19:48:49.929Z CVE-2026-55099: icalendar Algorithmic Complexity Denial of Service in Component Equality CVE Advisory https://securelayer7.net/lab/cve-2026-55596-platejs-media-embed-stored-xss-provider-metadata SecureLayer7 en 2026-08-25T16:48:48.260Z CVE-2026-55596: @platejs/media Media Embed Stored XSS via Serialized Provider Metadata CVE Advisory https://securelayer7.net/lab/cve-2026-55604-deepseek-mcp-server-session-hijack SecureLayer7 en 2026-08-25T18:48:47.330Z CVE-2026-55604: @arikusi/deepseek-mcp-server Cross-Session Authorization Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55620-eml-parser-dos-nested-parens-received-header SecureLayer7 en 2026-08-25T18:36:08.765Z CVE-2026-55620: eml_parser ReDoS via Deeply Nested Parentheses in Received Headers CVE Advisory https://securelayer7.net/lab/cve-2026-55629-whistle-arbitrary-file-read-path-traversal SecureLayer7 en 2026-08-25T18:34:53.706Z CVE-2026-55629: whistle Arbitrary File Read via Path Traversal CVE Advisory https://securelayer7.net/lab/cve-2026-55637-genieacs-mcp-dns-rebinding-origin-validation SecureLayer7 en 2026-08-25T18:08:49.899Z CVE-2026-55637: genieacs-mcp DNS Rebinding via Missing Host and Origin Validation CVE Advisory https://securelayer7.net/lab/cve-2026-56777-phpmyfaq-group-permissions-privilege-escalation SecureLayer7 en 2026-08-25T17:50:34.647Z CVE-2026-56777: phpMyFAQ GroupController Privilege Escalation via Missing Self-Rights Constraint Security Research https://securelayer7.net/lab/cve-2026-9769-justhtml-uncontrolled-recursion-dos-nested-html SecureLayer7 en 2026-08-25T16:50:51.995Z CVE-2026-9769: justhtml Uncontrolled Recursion DoS via Deeply Nested HTML Security Research https://securelayer7.net/lab/librenms-stored-xss-snmp-syslog-legacy-templates SecureLayer7 en 2026-08-26T18:08:59.280Z LibreNMS Stored XSS via Unescaped SNMP and Syslog Data in Legacy Templates Security Research https://securelayer7.net/lab/mcp-contextforge-gateway-ssti-jinja2-rce-prompt-service SecureLayer7 en 2026-08-25T17:48:45.446Z mcp-contextforge-gateway Server-Side Template Injection (SSTI) leading to RCE Security Research