https://blog.securelayer7.net/cve-2026-20230-cisco-unified-cm-rce/ SecureLayer7 en 2026-07-13T04:25:43.000Z Cisco Unified CM Pre-Auth RCE — When the Phone System Becomes the Attacker’s Foothold CVE Advisory https://securelayer7.net/lab/cve-2026-45378-decidim-verifications-unauthenticated-signed-storage-url SecureLayer7 en 2026-07-13T17:30:23.414Z CVE-2026-45378: decidim-verifications Unauthenticated Access to Signed Identity Document URLs CVE Advisory https://securelayer7.net/lab/cve-2026-45414-decidim-jwt-cross-organization-auth-bypass SecureLayer7 en 2026-07-13T17:29:50.140Z CVE-2026-45414: Decidim JWT Cross-Organization Authentication Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-48118-nukeviet-reflected-xss-comment-status-base64 SecureLayer7 en 2026-07-13T17:28:39.550Z CVE-2026-48118: NukeViet Unauthenticated Reflected XSS via Base64-Encoded Comment Status Parameter CVE Advisory https://securelayer7.net/lab/cve-2026-49259-nukeviet-stored-xss-comment-reply SecureLayer7 en 2026-07-13T17:28:01.128Z CVE-2026-49259: NukeViet CMS Stored XSS via Comment Reply Handler CVE Advisory https://securelayer7.net/lab/cve-2026-54064-nukeviet-stored-xss-filter-bypass SecureLayer7 en 2026-07-13T18:09:01.585Z CVE-2026-54064: NukeViet CMS Multiple Anti-XSS Filter Bypasses Leading to Stored XSS CVE Advisory https://securelayer7.net/lab/cve-2026-54065-nukeviet-path-traversal-arbitrary-file-deletion SecureLayer7 en 2026-07-13T18:08:25.121Z CVE-2026-54065: NukeViet Path Traversal to Arbitrary File Deletion CVE Advisory https://securelayer7.net/lab/cve-2026-55372-nukeviet-preauth-ssrf-x-forwarded-host SecureLayer7 en 2026-07-13T18:07:58.923Z CVE-2026-55372: NukeViet Pre-auth SSRF via X-Forwarded-Host CVE Advisory https://securelayer7.net/lab/cve-2026-59954-apollo-configservice-accesskey-appid-bypass SecureLayer7 en 2026-07-13T18:28:02.445Z CVE-2026-59954: Apollo ConfigService AccessKey Authentication Bypass via Non-Canonical appId CVE Advisory https://securelayer7.net/lab/cve-2026-61668-dirac-pilotwrapper-tls-certificate-validation-mitm SecureLayer7 en 2026-07-13T18:48:48.428Z CVE-2026-61668: DIRAC PilotWrapper Disabled TLS Certificate Validation CVE Advisory