SVD-2026-0613: Insecure Default Domain Allowlist in Splunk AI Toolkit
In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the “admin” or “power”
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
SVD-2026-0614: OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit
In Splunk AI Toolkit versions below 5.7.4, a user who holds the “admin” Splunk role could execute arbitrary
2 sources
Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a
Connected reporting, one intelligence threadsec.cloudapps.cisco.com · cybersecuritynews.com
Cisco Crosswork Network Controller Server-Side Template Injection Vulnerability
A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to
Cisco Webex App Open Redirect Vulnerability
A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker to
Making Workflow Runs Explain Themselves: AI-Powered Run Summaries in Cisco XDR Automate
Cisco XDR Automate now uses AI to summarize workflow runs, speeding up troubleshooting and improving transparency across automation
RHSA-2026:25180: Important: OpenShift Container Platform 4.18.44 packages and security update
Red Hat OpenShift Container Platform release 4.18.44 is now available with updates to packages and images that fix
USN-8438-1: OpenImageIO vulnerabilities
It was discovered that OpenImageIO incorrectly performed bounds checking when processing SGI files. An attacker could possibly use
DSA-6348-1 gsasl – security update
https://security-tracker.debian.org/tracker/DSA-6348-1
CVE-2026-53776
Critical Severity Description Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to bypass token
CVE-2026-44932
High Severity Description Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79
CVE-2026-42089
High Severity Description Yeoman Environment provides an API to discover, create, and run generators, and to configure where