USN-8315-1: MediaWiki vulnerabilities
It was discovered that MediaWiki incorrectly handled group membership visibility in the OATHAuth extension. An authenticated attacker could
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
USN-8317-1: GStreamer Good Plugins vulnerabilities
It was discovered that GStreamer Good Plugins incorrectly handled certain MP4 audio tracks. An attacker could possibly use
A 4X Gartner Magic Quadrant for EPP Leader. Built for the Agentic Era.
I am incredibly proud to share that Palo Alto Networks has been named a Leader in the 2026
21 sources
RHSA-2026:21296: Important: .NET 9.0 security update
An update for .NET 9.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security
Connected reporting, one intelligence threadaccess.redhat.com
USN-8314-1: Ayttm vulnerabilities
It was discovered that Expat, vendored in Ayttm, incorrectly handled certain files. An attacker could possibly use this
USN-8313-1: XML-RPC for C and C++ vulnerabilities
It was discovered that Expat, vendored in XML-RPC, incorrectly handled certain files. An attacker could possibly use this
RHSA-2026:20322: Important: Red Hat build of MicroShift 4.19.32 security update
Red Hat build of MicroShift release 4.19.32 is now available with updates to packages and images that include
USN-8303-1: GitPython vulnerabilities
Santos Gallegos discovered that GitPython did not properly validate paths when resolving certain Git references. An attacker could
DSA-6300-1 node-shell-quote – security update
https://security-tracker.debian.org/tracker/DSA-6300-1
DSA-6299-1 kdenlive – security update
https://security-tracker.debian.org/tracker/DSA-6299-1
DSA-6298-1 imagemagick – security update
https://security-tracker.debian.org/tracker/DSA-6298-1
CVE-2026-27331
Medium Severity Description Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels.