https://blog.securelayer7.net/cve-2026-63077-teamcity-rce/ SecureLayer7 en 2026-08-28T10:46:12.000Z CVE-2026-63077: XStream Deserialization in JetBrains TeamCity’s Agent Polling Protocol Enables Pre-Auth RCE CVE Advisory https://securelayer7.net/lab/crossplane-xpkg-cachedclient-toctou-signature-bypass SecureLayer7 en 2026-08-27T17:28:58.492Z Crossplane xpkg.CachedClient TOCTOU Signature Verification Bypass Security Research https://securelayer7.net/lab/cve-2026-54736-phalcon-crypt-decrypt-hmac-timing-side-channel SecureLayer7 en 2026-08-28T16:10:43.861Z CVE-2026-54736: Phalcon Crypt::decrypt HMAC Timing Side-Channel CVE Advisory https://securelayer7.net/lab/cve-2026-54754-klever-go-marketplace-royalty-referral-klv-mint SecureLayer7 en 2026-08-28T16:31:01.279Z CVE-2026-54754: klever-go Marketplace Settlement Integer Underflow Mints KLV CVE Advisory https://securelayer7.net/lab/cve-2026-54755-klever-go-split-royalty-integer-overflow-klv-mint SecureLayer7 en 2026-08-28T16:29:23.140Z CVE-2026-54755: klever-go Integer Overflow in Split-Royalty Validation Enables Unbounded KLV Minting CVE Advisory https://securelayer7.net/lab/cve-2026-54757-compliance-trestle-ssti-markdown-include SecureLayer7 en 2026-08-28T16:34:54.429Z CVE-2026-54757: compliance-trestle Server-Side Template Injection via Markdown Include Tags CVE Advisory https://securelayer7.net/lab/cve-2026-54788-datadog-opentelemetry-tracestate-dos SecureLayer7 en 2026-08-28T16:49:00.694Z CVE-2026-54788: datadog-opentelemetry Unbounded tracestate Parsing DoS CVE Advisory https://securelayer7.net/lab/cve-2026-55066-vikunja-kanban-idor-task-bucket SecureLayer7 en 2026-08-28T17:11:14.717Z CVE-2026-55066: Vikunja Kanban Move-Task IDOR (Cross-Tenant Task Read and Write) CVE Advisory https://securelayer7.net/lab/cve-2026-55108-kubevela-terraform-remote-symlink-dos SecureLayer7 en 2026-08-28T16:36:18.132Z CVE-2026-55108: KubeVela Terraform Remote Loader Symlink DoS CVE Advisory https://securelayer7.net/lab/cve-2026-55175-spinnaker-rosco-kustomize-yaml-deserialization-rce SecureLayer7 en 2026-08-28T18:57:47.040Z CVE-2026-55175: Spinnaker rosco-manifests Unsafe YAML Deserialization RCE CVE Advisory https://securelayer7.net/lab/cve-2026-55207-pimcore-studio-backend-password-reset-url-injection SecureLayer7 en 2026-08-28T19:14:53.724Z CVE-2026-55207: Pimcore Studio Backend Bundle Account Takeover via Password Reset URL Injection CVE Advisory https://securelayer7.net/lab/cve-2026-55208-pimcore-studio-backend-datefilter-sql-injection SecureLayer7 en 2026-08-28T19:09:51.900Z CVE-2026-55208: Pimcore Studio Backend Bundle SQL Injection via DateFilter Column Key CVE Advisory https://securelayer7.net/lab/cve-2026-55212-pimcore-studio-backend-privilege-escalation-class-definition SecureLayer7 en 2026-08-28T19:08:43.896Z CVE-2026-55212: Pimcore Studio Backend Bundle Privilege Escalation via Incorrect Permission Guard on Class Definition Creation CVE Advisory https://securelayer7.net/lab/cve-2026-55215-mariadb-nodejs-ssl-mitm-password-leak SecureLayer7 en 2026-08-28T19:11:46.090Z CVE-2026-55215: mariadb (npm) Cleartext Password Leak to MitM via Late SSL Fingerprint Check CVE Advisory https://securelayer7.net/lab/cve-2026-55228-weblate-groupviewset-idor-private-project SecureLayer7 en 2026-08-28T18:55:33.640Z CVE-2026-55228: Weblate GroupViewSet IDOR Allows Unauthorized Private Project Access CVE Advisory https://securelayer7.net/lab/cve-2026-55245-bifrost-ispublicip-ssrf-nat64-cgnat-bypass SecureLayer7 en 2026-08-28T18:29:05.330Z CVE-2026-55245: Bifrost isPublicIP SSRF Deny-List Bypass via NAT64, 6to4, and CGNAT CVE Advisory https://securelayer7.net/lab/cve-2026-55247-plone-app-event-ical-import-dos-ssrf-xss SecureLayer7 en 2026-08-28T19:16:13.642Z CVE-2026-55247: plone.app.event iCalendar Import DoS, SSRF, and Stored XSS CVE Advisory https://securelayer7.net/lab/cve-2026-55248-plone-app-portlets-rss-portlet-dos-ssrf-xss SecureLayer7 en 2026-08-28T18:50:36.444Z CVE-2026-55248: plone.app.portlets RSS Portlet DoS, SSRF, and Stored XSS CVE Advisory https://securelayer7.net/lab/cve-2026-55460-snipe-it-bulk-user-delete-authorization-bypass SecureLayer7 en 2026-08-28T18:10:32.712Z CVE-2026-55460: Snipe-IT Authorization Bypass on Bulk User Delete CVE Advisory https://securelayer7.net/lab/cve-2026-55484-alos-http-malformed-path-dos-panic SecureLayer7 en 2026-08-28T19:21:44.595Z CVE-2026-55484: alos-http Unauthenticated Remote Denial of Service via Malformed Path CVE Advisory https://securelayer7.net/lab/cve-2026-55511-yamcs-streamsql-aggregate-column-injection-rce SecureLayer7 en 2026-08-28T17:09:14.349Z CVE-2026-55511: yamcs-core Authenticated RCE via StreamSQL Aggregate Column-Name Injection CVE Advisory https://securelayer7.net/lab/cve-2026-55516-snipe-it-maintenance-asset-id-authorization-bypass SecureLayer7 en 2026-08-28T18:08:48.316Z CVE-2026-55516: Snipe-IT Cross-Company Asset Maintenance Re-Parenting via API CVE Advisory https://securelayer7.net/lab/cve-2026-55520-protego-redos-robots-txt-wildcard SecureLayer7 en 2026-08-28T18:49:07.472Z CVE-2026-55520: Protego ReDoS via robots.txt Wildcard Directive CVE Advisory https://securelayer7.net/lab/cve-2026-55521-yamcs-core-api-missing-authorization SecureLayer7 en 2026-08-28T17:31:13.386Z CVE-2026-55521: Yamcs Core API Multiple Missing Authorization Checks CVE Advisory https://securelayer7.net/lab/cve-2026-55552-yamcs-unauthenticated-directory-traversal-double-slash SecureLayer7 en 2026-08-28T17:30:01.007Z CVE-2026-55552: Yamcs Unauthenticated Directory Traversal via Double-Slash URI CVE Advisory https://securelayer7.net/lab/cve-2026-55559-yamcs-core-template-yaml-injection-rce SecureLayer7 en 2026-08-28T17:28:53.535Z CVE-2026-55559: yamcs-core Remote Code Execution via Instance Template YAML Injection CVE Advisory https://securelayer7.net/lab/cve-2026-55584-phpsysinfo-ip-allowlist-bypass-x-forwarded-for SecureLayer7 en 2026-08-28T19:35:27.782Z CVE-2026-55584: phpSysInfo IP Allowlist Bypass via Spoofed Headers CVE Advisory https://securelayer7.net/lab/cve-2026-55621-incus-custom-volume-copy-project-bypass SecureLayer7 en 2026-08-28T19:17:18.715Z CVE-2026-55621: Incus Project Restriction Bypass via Custom Volume Copy CVE Advisory https://securelayer7.net/lab/cve-2026-55622-incus-instance-copy-project-restriction-bypass SecureLayer7 en 2026-08-28T19:02:31.853Z CVE-2026-55622: Incus Project Restriction Bypass in Instance Copy CVE Advisory https://securelayer7.net/lab/cve-2026-55634-pimcore-dataobject-field-name-rce-sqli SecureLayer7 en 2026-08-28T19:23:08.779Z CVE-2026-55634: Pimcore DataObject Field Name Remote Code Execution and SQL Injection CVE Advisory https://securelayer7.net/lab/cve-2026-55638-9router-codex-rewrite-authorization-bypass SecureLayer7 en 2026-08-28T19:31:17.141Z CVE-2026-55638: 9router Unauthenticated LLM Proxy Access via /codex Rewrite Authorization Bypass CVE Advisory https://securelayer7.net/lab/cve-2026-55641-9router-host-header-auth-bypass-ssrf SecureLayer7 en 2026-08-28T19:30:02.652Z CVE-2026-55641: 9router Authentication Bypass via Host Header Spoofing and SSRF CVE Advisory https://securelayer7.net/lab/cve-2026-55673-powsybl-local-command-executor-os-command-injection SecureLayer7 en 2026-08-28T19:04:19.574Z CVE-2026-55673: powsybl-computation-local OS Command Injection via LocalCommandExecutor CVE Advisory https://securelayer7.net/lab/cve-2026-55761-portainer-unauthenticated-admin-takeover-init-restore SecureLayer7 en 2026-08-28T20:49:02.506Z CVE-2026-55761: Portainer Unauthenticated Admin Takeover via Initialization Endpoints CVE Advisory https://securelayer7.net/lab/cve-2026-57584-phalcon-router-redos-catastrophic-backtracking SecureLayer7 en 2026-08-28T16:09:04.939Z CVE-2026-57584: Phalcon Router Catastrophic Backtracking (ReDoS) CVE Advisory