Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE)
USN-8649-1: libheif vulnerabilities
It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was
2 sources
USN-8563-3: nginx vulnerability
USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was backed out in USN-8563-2 because it could cause
Connected reporting, one intelligence threadubuntu.com
USN-8648-1: Bind vulnerabilities
It was discovered that Bind incorrectly accepted NSEC3 records whose signer name did not match the owning zone.
USN-8093-2: libssh vulnerability
USN-8093-1 fixed a vulnerability in libssh. This update provides the corresponsing fix for Ubuntu 26.04 LTS. Original advisory
USN-8113-2: LibTIFF vulnerabilities
USN 8113-1 fixed vulnerabilities in tiff. This update provides the corresponding fixes for Ubuntu 26.04 LTS. Original advisory
2 sources
RHSA-2026:56965: Moderate: libcupsfilters security update
An update for libcupsfilters is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has
Connected reporting, one intelligence threadaccess.redhat.com
CVE-2026-49423
High Severity Description When building the iovec array for a received TLS 1.2 CBC record, ktls_ocf_tls_cbc_decrypt() incremented the
2 sources
CVE-2026-15780
High Severity Description The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to
Connected reporting, one intelligence threadtenable.com
Hunting MacSync Stealer infrastructure through behavioral pivots
In this article Activity overview Discovery of additional rotating infrastructure Attack chain overview Mitigation and protection guidance References
3 sources
RHSA-2026:56521: Important: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
Connected reporting, one intelligence threadaccess.redhat.com