April 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
March 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central
February 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central
Arbitrary directory delete on vmimages delete feature
CVSSv3 Score: 6.2 An Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability [CWE-22] in
2FA request can be replayed without a valid token after one successful request
CVSSv3 Score: 6.7 An Improper authentication vulnerability [CWE-287] in FortiSOAR web GUI may allow an unauthenticated attacker to
Out-Of-Bounds Write in administrative interface
CVSSv3 Score: 6.7 An out-of-bounds write vulnerability [CWE-787] in FortiWeb CGI daemon may allow a remote privileged attacker
SSA-913875 V1.5 (Last Update: 2026-04-14): Frame Aggregation and Fragmentation Vulnerabilities in 802.11
<p>Twelve vulnerabilities in the implementation of frame aggregation and fragmentation of the 802.11 standard, under the name of
SSA-981622 V1.0: Improper Certificate Validation Vulnerability in Siemens Analytics Toolkit
<p>Multiple Siemens applications are affected by improper certificate validation in Siemens Analytics Toolkit. This could allow an unauthenticated
SSA-827968 V1.1 (Last Update: 2026-04-14): Vulnerability in Nozomi Guardian/CMC on RUGGEDCOM APE1808 Devices
<p>Nozomi Networks has published information on vulnerabilities in <a href="https://security.nozominetworks.com/">Nozomi Guardian/CMC</a>. This advisory lists the related Siemens Industrial
Vulnerabilities in the Apache Log4j (“Log4Shell”)
Siemens is aware of the security vulnerabilities in Apache Log4j (CVE-2021-44228 and CVE-2021-45046), also named “Log4Shell”.For Siemens products,
Vulnerabilities in the Nucleus TCP/IP Stack (“NUCLEUS:13”)
Today, in coordination with Forescout, CISA and other contributors, Siemens has disclosed the security vulnerabilities CVE-2021-31344 through CVE-2021-31346
Vulnerabilities in Interniche TCP/IP Stack (“INFRA:HALT”)
Siemens is aware of the security vulnerabilities named INFRA:HALT. The impact to Siemens products is described in the