Dfpc-coe Cloudtak vulnerabilities

• dfpc-coe cloudtak CloudTAK: Authenticated full-read SSRF in /api/esri* routes — user-controlled URL fetched with no IP-classification guard CVE-2026-55177 Fix available 7.6 HighJuly 17, 2026
• dfpc-coe cloudtak CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard CVE-2026-54546 Fix available 5.0 MediumJuly 17, 2026