USN-8624-1: Sinatra vulnerability
It was discovered that Sinatra did not properly handle header parsing, causing ETag generation to hang when given
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
9 sources
RHSA-2026:48605: Important: fence-agents security update
An update for fence-agents is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Connected reporting, one intelligence threadaccess.redhat.com
RHSA-2026:48118: Important: Red Hat Build of Apache Camel 4.18.3 for Quarkus 3.33 update is now available (RHBQ 3.33.2.SP3)
An update for Red Hat Build of Apache Camel 4.18.3 for Quarkus 3.33 update is now available (RHBQ
DSA-6404-1 expat – security update
https://security-tracker.debian.org/tracker/DSA-6404-1
Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks
Unit 42 details a Chinese speaking threat actor combining autonomous AI scanning across seven vulnerabilities with manual exploitation.
CVE-2026-7849
Critical Severity Description Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject
CVE-2026-18353
High Severity Description PIA’s `POST /v1/upload/sbom` endpoint accepts a Bearer JWT and checks its **unverified** `iss` claim against
CVE-2026-44108
Critical Severity Description Due to a flaw in the execution order of scripts during shutdown, the firewall is
51 sources
RHSA-2026:48603: Important: hplip security update
An update for hplip is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Connected reporting, one intelligence threadaccess.redhat.com
3 sources
RHSA-2026:47755: Moderate: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
Connected reporting, one intelligence threadaccess.redhat.com
RHSA-2026:47718: Important: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
RHSA-2026:47731: Important: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has