USN-8542-1: Dnsmasq vulnerabilities
Yiwei Hou discovered that Dnsmasq incorrectly handled logging of DS or DNSKEY. A remote attacker could possibly use
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
RHSA-2026:39309: Low: capstone security update
An update for capstone is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has
RHSA-2026:39296: Moderate: libinput security update
An update for libinput is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has
USN-8540-1: OpenVPN vulnerabilities
It was discovered that OpenVPN had a 1-byte buffer overrun when handling NTLMv2 proxy responses. An attacker could
Cross-Site Scripting in Domain parameter
CVSSv3 Score: 5.3 An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability [CWE-80]
Buffer overread in authd and wad daemon
CVSSv3 Score: 4.1 A buffer over-read vulnerability [CWE-126] in FortiOS, FortiProxy, and FortiSASE may allow an authenticated remote
Header injection in Web Filter warning page
CVSSv3 Score: 3.4 An Improper Neutralization of CRLF Sequences in HTTP Headers (‘HTTP Response Splitting’) vulnerability [CWE-113] in
July 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and
USN-8538-1: alsa-lib vulnerability
It was discovered that alsa-lib incorrectly handled certain ALSA configuration text. An attacker could use this issue to
USN-8536-1: MariaDB vulnerabilities
It was discovered that MariaDB did not properly validate parameters supplied by a joiner node during a State
USN-8537-1: httplib2 vulnerability
It was discovered that httplib2 performed unbounded decompression of HTTP response bodies when the server used gzip or
Community update regarding Richard Greenberg
For community clarity following several recent announcements by ISSA and Richard Greenberg, OWASP confirms that Richard Greenberg’s membership