News that matters, without the noise.

SVD-2026-0611: Log Injection through HTTP Request Paths in Splunk SOAR

In Splunk SOAR (Security Orchestration, Automation, and Response) versions below 8.5.0, an unauthenticated attacker could inject American National

SVD-2026-0610: Third-Party Package Updates in Splunk Enterprise – June 2026

Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in Splunk Enterprise versions 10.4.0, 10.2.4, 10.0.7,

CVE-2026-8637

High Severity Description A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that

CVE-2026-8335

High Severity Description A missing authentication check on the Aix‑DB “/llm/process_llm_out” endpoint allows unauthenticated clients to execute arbitrary

USN-6455-2: Exim regression

USN-6455-1 fixed vulnerabilities in Exim. The fix for CVE-2023-42117 introduced a regression on Ubuntu 22.04 LTS that resulted

USN-8130-3: GStreamer Base Plugins vulnerability

USN-8130-1 fixed a vulnerability in GStreamer Base Plugins. This update provides the corresponding update for Ubuntu 16.04 LTS.

RHSA-2026:23808: Important: Red Hat build of Quarkus 3.27.4 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this

CVE-2026-24066

Critical Severity Description Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital… Read more at

CVE-2026-3018

High Severity Description The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘wpmlsubscriber_id’ parameter

CVE-2026-11853

Critical Severity Description Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Debian source

June 2026 Patch Tuesday: Microsoft Patches 206 Vulnerabilities Including Three Publicly Disclosed Zero-Days

CrowdStrike 2026 Technology Threat Landscape Report: China’s Ambitions Fuel Attacks