https://securelayer7.net/lab/cve-2026-55175-spinnaker-rosco-kustomize-yaml-deserialization-rce SecureLayer7 en 2026-08-28T18:57:47.040Z CVE-2026-55175: Spinnaker rosco-manifests Unsafe YAML Deserialization RCE CVE Advisory https://securelayer7.net/lab/cve-2026-55207-pimcore-studio-backend-password-reset-url-injection SecureLayer7 en 2026-08-28T19:14:53.724Z CVE-2026-55207: Pimcore Studio Backend Bundle Account Takeover via Password Reset URL Injection CVE Advisory https://securelayer7.net/lab/cve-2026-55208-pimcore-studio-backend-datefilter-sql-injection SecureLayer7 en 2026-08-28T19:09:51.900Z CVE-2026-55208: Pimcore Studio Backend Bundle SQL Injection via DateFilter Column Key CVE Advisory https://securelayer7.net/lab/cve-2026-55212-pimcore-studio-backend-privilege-escalation-class-definition SecureLayer7 en 2026-08-28T19:08:43.896Z CVE-2026-55212: Pimcore Studio Backend Bundle Privilege Escalation via Incorrect Permission Guard on Class Definition Creation CVE Advisory https://securelayer7.net/lab/cve-2026-55215-mariadb-nodejs-ssl-mitm-password-leak SecureLayer7 en 2026-08-28T19:11:46.090Z CVE-2026-55215: mariadb (npm) Cleartext Password Leak to MitM via Late SSL Fingerprint Check CVE Advisory https://securelayer7.net/lab/cve-2026-55228-weblate-groupviewset-idor-private-project SecureLayer7 en 2026-08-28T18:55:33.640Z CVE-2026-55228: Weblate GroupViewSet IDOR Allows Unauthorized Private Project Access CVE Advisory https://securelayer7.net/lab/cve-2026-55245-bifrost-ispublicip-ssrf-nat64-cgnat-bypass SecureLayer7 en 2026-08-28T18:29:05.330Z CVE-2026-55245: Bifrost isPublicIP SSRF Deny-List Bypass via NAT64, 6to4, and CGNAT CVE Advisory https://securelayer7.net/lab/cve-2026-55247-plone-app-event-ical-import-dos-ssrf-xss SecureLayer7 en 2026-08-28T19:16:13.642Z CVE-2026-55247: plone.app.event iCalendar Import DoS, SSRF, and Stored XSS CVE Advisory https://securelayer7.net/lab/cve-2026-55248-plone-app-portlets-rss-portlet-dos-ssrf-xss SecureLayer7 en 2026-08-28T18:50:36.444Z CVE-2026-55248: plone.app.portlets RSS Portlet DoS, SSRF, and Stored XSS CVE Advisory https://securelayer7.net/lab/cve-2026-55484-alos-http-malformed-path-dos-panic SecureLayer7 en 2026-08-28T19:21:44.595Z CVE-2026-55484: alos-http Unauthenticated Remote Denial of Service via Malformed Path CVE Advisory https://securelayer7.net/lab/cve-2026-55520-protego-redos-robots-txt-wildcard SecureLayer7 en 2026-08-28T18:49:07.472Z CVE-2026-55520: Protego ReDoS via robots.txt Wildcard Directive CVE Advisory https://securelayer7.net/lab/cve-2026-55584-phpsysinfo-ip-allowlist-bypass-x-forwarded-for SecureLayer7 en 2026-08-28T19:35:27.782Z CVE-2026-55584: phpSysInfo IP Allowlist Bypass via Spoofed Headers CVE Advisory https://securelayer7.net/lab/cve-2026-55621-incus-custom-volume-copy-project-bypass SecureLayer7 en 2026-08-28T19:17:18.715Z CVE-2026-55621: Incus Project Restriction Bypass via Custom Volume Copy CVE Advisory https://securelayer7.net/lab/cve-2026-55622-incus-instance-copy-project-restriction-bypass SecureLayer7 en 2026-08-28T19:02:31.853Z CVE-2026-55622: Incus Project Restriction Bypass in Instance Copy CVE Advisory https://securelayer7.net/lab/cve-2026-55634-pimcore-dataobject-field-name-rce-sqli SecureLayer7 en 2026-08-28T19:23:08.779Z CVE-2026-55634: Pimcore DataObject Field Name Remote Code Execution and SQL Injection CVE Advisory https://securelayer7.net/lab/cve-2026-55638-9router-codex-rewrite-authorization-bypass SecureLayer7 en 2026-08-28T19:31:17.141Z CVE-2026-55638: 9router Unauthenticated LLM Proxy Access via /codex Rewrite Authorization Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55641-9router-host-header-auth-bypass-ssrf SecureLayer7 en 2026-08-28T19:30:02.652Z CVE-2026-55641: 9router Authentication Bypass via Host Header Spoofing and SSRF CVE Advisory https://securelayer7.net/lab/cve-2026-55673-powsybl-local-command-executor-os-command-injection SecureLayer7 en 2026-08-28T19:04:19.574Z CVE-2026-55673: powsybl-computation-local OS Command Injection via LocalCommandExecutor CVE Advisory https://securelayer7.net/lab/cve-2026-55761-portainer-unauthenticated-admin-takeover-init-restore SecureLayer7 en 2026-08-28T20:49:02.506Z CVE-2026-55761: Portainer Unauthenticated Admin Takeover via Initialization Endpoints CVE Advisory https://securelayer7.net/lab/cve-2026-55764-klever-go-sft-int64-overflow-maxsupply-bypass SecureLayer7 en 2026-08-28T22:34:54.499Z CVE-2026-55764: klever-go SFT Add-Quantity int64 Overflow Bypasses Per-Nonce MaxSupply CVE Advisory https://securelayer7.net/lab/cve-2026-55784-free5gc-ausf-auth-context-race-condition SecureLayer7 en 2026-08-28T22:29:06.226Z CVE-2026-55784: free5GC AUSF Authentication Context Race Condition CVE Advisory https://securelayer7.net/lab/cve-2026-55830-restrictedpython-guard-hook-shadow-positional-only-args SecureLayer7 en 2026-08-28T23:09:01.854Z CVE-2026-55830: RestrictedPython Guard Hook Shadow via Positional-Only Arguments CVE Advisory https://securelayer7.net/lab/cve-2026-55841-graylog-fortigate-syslog-field-injection SecureLayer7 en 2026-08-28T22:31:19.930Z CVE-2026-55841: Graylog FortiGate Syslog Parser Field Injection CVE Advisory https://securelayer7.net/lab/cve-2026-55848-mapfish-print-xxe-gml-layer SecureLayer7 en 2026-08-28T22:49:40.195Z CVE-2026-55848: MapFish Print XXE via GML Layer URL CVE Advisory https://securelayer7.net/lab/cve-2026-55874-seaweedfs-s3-copy-source-path-traversal SecureLayer7 en 2026-08-28T22:30:09.639Z CVE-2026-55874: SeaweedFS S3 Gateway Cross-Bucket Path Traversal via X-Amz-Copy-Source CVE Advisory