https://blog.securelayer7.net/owasp-top-10-proactive-controls/ SecureLayer7 en 2026-08-06T11:09:24.000Z A Guide to OWASP Top 10 Proactive Controls Security News https://blog.securelayer7.net/apache-dubbo-remote-003-path-traversal/ SecureLayer7 en 2026-08-05T14:38:03.000Z REMOTE-003 Path Traversal in Configuration Subsystem of Apache Dubbo 3.3.x CVE Advisory https://blog.securelayer7.net/ai-security/ SecureLayer7 en 2026-08-05T11:13:15.000Z AI Security: A Complete Guide to Securing Enterprise AI Systems Security News https://securelayer7.net/lab/cve-2026-53950-tryghost-activitypub-stored-xss SecureLayer7 en 2026-08-04T22:09:37.437Z CVE-2026-53950: @tryghost/activitypub Stored XSS via Federated Post Content CVE Advisory https://securelayer7.net/lab/cve-2026-54572-rclone-links-symlink-escape-arbitrary-file-write SecureLayer7 en 2026-08-05T20:29:14.281Z CVE-2026-54572: rclone Symlink Target Escape via --links (Arbitrary File Write) CVE Advisory https://securelayer7.net/lab/cve-2026-54763-traefik-underscore-header-identity-spoofing SecureLayer7 en 2026-08-06T17:09:04.206Z CVE-2026-54763: Traefik BasicAuth/DigestAuth/ForwardAuth Underscore Header Identity Spoofing CVE Advisory https://securelayer7.net/lab/cve-2026-59733-rclone-restic-private-repos-path-traversal-authz-bypass SecureLayer7 en 2026-08-05T20:48:57.512Z CVE-2026-59733: rclone serve restic --private-repos Authorization Bypass via Path Traversal CVE Advisory https://securelayer7.net/lab/cve-2026-65600-traefik-replacepathregex-auth-bypass-path-traversal SecureLayer7 en 2026-08-06T17:10:21.964Z CVE-2026-65600: Traefik ReplacePathRegex Authentication Bypass via Path Traversal CVE Advisory https://securelayer7.net/lab/cve-2026-67309-traefik-ingressnginx-rewritetarget-path-traversal-auth-bypass SecureLayer7 en 2026-08-06T16:49:01.930Z CVE-2026-67309: Traefik Kubernetes Ingress NGINX RewriteTarget Path Traversal Authentication Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-69264-flowise-csvagent-pyodide-code-injection-rce SecureLayer7 en 2026-08-04T17:49:01.092Z CVE-2026-69264: Flowise CSVAgent Pyodide Code Injection RCE CVE Advisory https://securelayer7.net/lab/cve-2026-70470-flowise-pyodide-unicode-homoglyph-rce SecureLayer7 en 2026-08-04T17:56:26.478Z CVE-2026-70470: Flowise Pyodide Validator Unicode Homoglyph Bypass RCE CVE Advisory https://securelayer7.net/lab/cve-2026-70471-flowise-rbac-bypass-workspace-variables-disclosure SecureLayer7 en 2026-08-04T17:51:28.799Z CVE-2026-70471: Flowise RBAC Bypass Leading to Workspace Variables Disclosure CVE Advisory https://securelayer7.net/lab/cve-2026-70472-flowise-cross-workspace-credential-idor-openai-assistants SecureLayer7 en 2026-08-04T17:54:51.688Z CVE-2026-70472: Flowise Cross-Workspace Credential IDOR in OpenAI Assistants Vector Store CVE Advisory https://securelayer7.net/lab/cve-2026-70473-flowise-upsert-history-information-disclosure SecureLayer7 en 2026-08-04T18:09:33.242Z CVE-2026-70473: Flowise Server-Wide Upsert History Information Disclosure CVE Advisory https://securelayer7.net/lab/cve-2026-70475-flowise-missing-authorization-execution-update SecureLayer7 en 2026-08-04T19:29:51.229Z CVE-2026-70475: Flowise Missing Authorization on Execution Update Endpoint CVE Advisory https://securelayer7.net/lab/cve-2026-70476-flowise-stripe-subscription-idor-billing SecureLayer7 en 2026-08-04T19:28:46.981Z CVE-2026-70476: Flowise Broken Access Control in Stripe Billing Endpoints CVE Advisory https://securelayer7.net/lab/cve-2026-70477-flowise-csv-agent-prompt-injection-rce SecureLayer7 en 2026-08-04T19:51:05.625Z CVE-2026-70477: Flowise CSV Agent Prompt Injection Remote Code Execution CVE Advisory https://securelayer7.net/lab/cve-2026-70479-open-webui-playwright-ssrf-sub-resource SecureLayer7 en 2026-08-04T19:48:59.147Z CVE-2026-70479: open-webui SSRF via Unvalidated Sub-Resource Requests in Playwright Web Loader CVE Advisory https://securelayer7.net/lab/cve-2026-70485-open-webui-nat64-ssrf-bypass SecureLayer7 en 2026-08-04T20:09:30.218Z CVE-2026-70485: Open WebUI NAT64-Encoded SSRF Filter Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-70492-open-webui-katex-stored-xss-render-error SecureLayer7 en 2026-08-04T21:09:39.744Z CVE-2026-70492: open-webui Stored XSS via KaTeX Render-Error Fallback CVE Advisory https://securelayer7.net/lab/cve-2026-70601-electron-contextbridge-bind-hijack-context-isolation-bypass SecureLayer7 en 2026-08-05T15:49:56.860Z CVE-2026-70601: Electron Context Isolation Bypass via Function.prototype.bind Hijack CVE Advisory https://securelayer7.net/lab/cve-2026-70608-electron-sandboxed-iframe-allow-popups-bypass SecureLayer7 en 2026-08-05T17:48:54.554Z CVE-2026-70608: Electron Sandboxed iframe allow-popups Restriction Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-71309-rclone-serve-restic-path-traversal-root-escape SecureLayer7 en 2026-08-05T20:30:34.412Z CVE-2026-71309: rclone serve restic Path Traversal Backend Root Escape CVE Advisory https://securelayer7.net/lab/cve-2026-71312-rclone-sftp-powershell-smartquote-command-injection SecureLayer7 en 2026-08-05T20:50:14.348Z CVE-2026-71312: rclone SFTP PowerShell Smart-Quote Filename OS Command Injection CVE Advisory https://securelayer7.net/lab/cve-2026-71314-nuxt-island-vfor-oom-dos SecureLayer7 en 2026-08-05T21:10:14.928Z CVE-2026-71314: Nuxt Unauthenticated DoS via Unbounded v-for Expansion in Island Rendering CVE Advisory https://securelayer7.net/lab/cve-2026-71315-nuxt-approute-rules-mixedcase-auth-bypass SecureLayer7 en 2026-08-05T21:08:47.270Z CVE-2026-71315: Nuxt appMiddleware Auth Bypass via Mixed-Case Route Rule Keys CVE Advisory https://securelayer7.net/lab/cve-2026-71316-nuxt-payload-cache-cross-user-disclosure SecureLayer7 en 2026-08-05T21:28:54.256Z CVE-2026-71316: Nuxt SSR Payload Cache Cross-User Information Disclosure CVE Advisory https://securelayer7.net/lab/cve-2026-71321-nuxt-island-cpu-exhaustion-dos SecureLayer7 en 2026-08-05T21:48:52.115Z CVE-2026-71321: Nuxt Island Endpoint Unauthenticated CPU Exhaustion (DoS) CVE Advisory https://securelayer7.net/lab/cve-2026-71324-traefik-h2-connect-pool-poisoning-response-smuggling SecureLayer7 en 2026-08-06T16:09:05.929Z CVE-2026-71324: Traefik HTTP/2 CONNECT Pool Poisoning Cross-User Response Smuggling CVE Advisory https://securelayer7.net/lab/cve-2026-71327-traefik-gateway-api-route-identity-collision SecureLayer7 en 2026-08-06T16:50:29.405Z CVE-2026-71327: Traefik Gateway API Route Identity Collision Allows Cross-Namespace Backend Hijacking CVE Advisory https://securelayer7.net/lab/flowise-s3-directory-loader-arbitrary-file-write-path-traversal SecureLayer7 en 2026-08-04T17:50:17.533Z Flowise: Authenticated Arbitrary File Write via S3 Directory Loader Path Traversal Security Research