DSA-6350-1 firefox-esr – security update
https://security-tracker.debian.org/tracker/DSA-6350-1
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
DSA-6349-1 atril – security update
https://security-tracker.debian.org/tracker/DSA-6349-1
Drupal core – Moderately critical – Improper validation – SA-CORE-2026-009
Project: Drupal core Date: 2026-June-17 Security risk: Moderately critical 11 ∕ 25 AC:Complex/A:User/CI:Some/II:Some/E:Theoretical/TD:Uncommon Vulnerability: Improper validation Affected versions: <10.5.12 ||
Drupal core – Less critical – Cache poisoning and open redirect – SA-CORE-2026-007
Project: Drupal core Date: 2026-June-17 Security risk: Less critical 9 ∕ 25 AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:Default Vulnerability: Cache poisoning and open redirect Affected
Drupal core – Moderately critical – Server-side request forgery – SA-CORE-2026-008
Project: Drupal core Date: 2026-June-17 Security risk: Moderately critical 10 ∕ 25 AC:Basic/A:User/CI:Some/II:None/E:Theoretical/TD:Default Vulnerability: Server-side request forgery Affected versions: <10.5.12
CVE-2026-35067
Medium Severity Description Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged attacker
CVE-2026-35066
High Severity Description Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged attacker
CVE-2026-35162
Medium Severity Description Dell PowerFlex Manager, version(s) [Versions], contain(s) an Improper Access Control vulnerability. A low privileged attacker
USN-8442-1: kitty vulnerabilities
It was discovered that kitty incorrectly handled certain image data. An attacker able to write to the terminal’s
RHSA-2026:26018: Important: Red Hat build of Quarkus 3.27.4.SP1 security update
An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this
SVD-2026-0613: Insecure Default Domain Allowlist in Splunk AI Toolkit
In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the “admin” or “power”
SVD-2026-0614: OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit
In Splunk AI Toolkit versions below 5.7.4, a user who holds the “admin” Splunk role could execute arbitrary