RADIUS Protocol Vulnerability (Blast-RADIUS)
CVE-2024-3596 On July 9, 2024 researches announced a protocol level vulnerability in the RADIUS protocol with the ability
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
SVD-2026-0408: Third-Party Package Updates in Splunk Operator for Kubernetes Add-on – April 2026
Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in Splunk Operator for Kubernetes Add-on version
SVD-2026-0406: Third-Party Package Updates in Splunk IT Service Intelligence (ITSI) – April 2026
Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in the Splunk IT Service Intelligence (ITSI)
SVD-2026-0407: Sensitive Information Disclosure in `_internal` index in Splunk MCP Server app
In Splunk MCP Server app versions below 1.0.3 , a user who holds a role with access to
April 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central
March 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central
February 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central
Arbitrary directory delete on vmimages delete feature
CVSSv3 Score: 6.2 An Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability [CWE-22] in
2FA request can be replayed without a valid token after one successful request
CVSSv3 Score: 6.7 An Improper authentication vulnerability [CWE-287] in FortiSOAR web GUI may allow an unauthenticated attacker to
Out-Of-Bounds Write in administrative interface
CVSSv3 Score: 6.7 An out-of-bounds write vulnerability [CWE-787] in FortiWeb CGI daemon may allow a remote privileged attacker
SSA-913875 V1.5 (Last Update: 2026-04-14): Frame Aggregation and Fragmentation Vulnerabilities in 802.11
<p>Twelve vulnerabilities in the implementation of frame aggregation and fragmentation of the 802.11 standard, under the name of
SSA-981622 V1.0: Improper Certificate Validation Vulnerability in Siemens Analytics Toolkit
<p>Multiple Siemens applications are affected by improper certificate validation in Siemens Analytics Toolkit. This could allow an unauthenticated