CVE-2026-8913
High Severity Description A command Injection vulnerability exists in the WireGuard client configuration of Archer MR600 v5 due
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
CVE-2026-42890
Medium Severity Description actual Allows Electron to Run As Node Read more at https://www.tenable.com/cve/CVE-2026-42890
CVE-2026-11556
High Severity Description A security flaw has been discovered in Tenda F451 1.0.0.7/1.0.0.9. Impacted is the function formWriteFacMac
USN-8407-1: strongSwan vulnerability
Elliott Childre discovered that strongSwan incorrectly handled the cloning of certain identities. A remote attacker could use this
USN-8408-1: Twig vulnerability
It was discovered that Twig did not properly validate PHP callables when using a source policy. An authenticated
USN-8406-1: Net::CIDR::Lite vulnerabilities
Dave Rolsky discovered that Net::CIDR::Lite did not properly handle extraneous zero characters at the beginning of an IP
2 sources
USN-8405-1: CUPS vulnerabilities
Ariel Silver discovered that CUPS incorrectly handled username comparisons during authorization checks. A local attacker could possibly use
Connected reporting, one intelligence threadubuntu.com
USN-8403-1: Kea DHCP vulnerability
Ali Norouzi discovered that Kea DHCP did not properly handle maliciously crafted messages over configured API sockets and
USN-8404-1: Transmission vulnerability
It was discovered that Transmission had a clickjacking weakness in the browser-facing WebUI and RPC response paths. An
DSA-6329-1 tomcat11 – security update
https://security-tracker.debian.org/tracker/DSA-6329-1
DSA-6328-1 tomcat10 – security update
https://security-tracker.debian.org/tracker/DSA-6328-1