https://blog.securelayer7.net/log4j2-marshalledobject-deserialization-bypass-to-rce/ SecureLayer7 en 2026-08-26T17:37:45.000Z Log4j2 MarshalledObject Deserialization Bypass to RCE CVE Advisory https://blog.securelayer7.net/autonomous-penetration-testing-complete-guide-2026/ SecureLayer7 en 2026-08-25T18:45:36.000Z Autonomous Penetration Testing: Complete Guide 2026 Security News https://securelayer7.net/lab/crossplane-xpkg-cachedclient-toctou-signature-bypass SecureLayer7 en 2026-08-27T17:28:58.492Z Crossplane xpkg.CachedClient TOCTOU Signature Verification Bypass Security Research https://securelayer7.net/lab/cve-2026-45018-chainlit-mcp-stdio-command-injection-rce SecureLayer7 en 2026-08-25T19:30:11.793Z CVE-2026-45018: Chainlit Unauthenticated Remote Code Execution via MCP stdio Command Injection CVE Advisory https://securelayer7.net/lab/cve-2026-45019-chainlit-mcp-ssrf-internal-network SecureLayer7 en 2026-08-25T19:29:02.230Z CVE-2026-45019: Chainlit SSRF via MCP SSE and Streamable-HTTP Transports CVE Advisory https://securelayer7.net/lab/cve-2026-54511-logtape-syslog-crlf-log-injection SecureLayer7 en 2026-08-26T14:49:54.303Z CVE-2026-54511: @logtape/syslog CRLF Log Injection via Unescaped C0 Control Characters CVE Advisory https://securelayer7.net/lab/cve-2026-54523-kyverno-namespacedmutatingpolicy-generator-apply-namespace-bypass SecureLayer7 en 2026-08-26T14:29:52.469Z CVE-2026-54523: Kyverno NamespacedMutatingPolicy Missing Authorization in generator.apply() CVE Advisory https://securelayer7.net/lab/cve-2026-54556-http4s-ember-hpack-bomb-dos SecureLayer7 en 2026-08-26T14:31:24.780Z CVE-2026-54556: http4s-ember-core HTTP/2 HPACK Bomb Denial of Service CVE Advisory https://securelayer7.net/lab/cve-2026-54563-cloudreve-webdav-path-traversal SecureLayer7 en 2026-08-26T15:30:05.907Z CVE-2026-54563: Cloudreve WebDAV Scoped Credential Path Traversal CVE Advisory https://securelayer7.net/lab/cve-2026-54569-senaite-core-unauth-rce-eval-injection-jsonapi SecureLayer7 en 2026-08-26T15:50:24.986Z CVE-2026-54569: senaite.core Unauthenticated Remote Code Execution via Eval Injection in JSON API CVE Advisory https://securelayer7.net/lab/cve-2026-54591-asyncssh-scp-path-traversal-arbitrary-file-write SecureLayer7 en 2026-08-26T15:49:03.822Z CVE-2026-54591: asyncssh SCP Client Path Traversal to Arbitrary File Write CVE Advisory https://securelayer7.net/lab/cve-2026-54606-suneditor-embed-plugin-dom-xss-script-src SecureLayer7 en 2026-08-26T15:28:54.402Z CVE-2026-54606: suneditor Embed Plugin DOM XSS via External Script Element CVE Advisory https://securelayer7.net/lab/cve-2026-55099-icalendar-component-equality-dos SecureLayer7 en 2026-08-25T19:48:49.929Z CVE-2026-55099: icalendar Algorithmic Complexity Denial of Service in Component Equality CVE Advisory https://securelayer7.net/lab/cve-2026-55604-deepseek-mcp-server-session-hijack SecureLayer7 en 2026-08-25T18:48:47.330Z CVE-2026-55604: @arikusi/deepseek-mcp-server Cross-Session Authorization Bypass CVE Advisory https://securelayer7.net/lab/librenms-stored-xss-snmp-syslog-legacy-templates SecureLayer7 en 2026-08-26T18:08:59.280Z LibreNMS Stored XSS via Unescaped SNMP and Syslog Data in Legacy Templates Security Research