USN-8872-1: libxmltok vulnerabilities
It was discovered that Expat, contained with the xmltok library did not correctly handle certain integer arithmetic. If
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
CVE-2026-86671
High Severity Description In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass
CVE-2026-12171
High Severity Description auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the
CVE-2026-78412
Medium Severity Description Velociraptor’s WatchEvent gRPC API can specify the OrgId of the org from which events should
RHSA-2026:76134: Important: Red Hat Single Sign-On 7.6.13 for OpenShift image security update
A new image is available for Red Hat Single Sign-On 7.6.13, running on OpenShift Container Platform 3.10 and
USN-8870-1: OpenStack Aodh and Watcher vulnerability
Chen YuXiang discovered that OpenStack Aodh did not correctly enforce project scoping in its alarm list API and
RHSA-2026:76045: Important: libpcap security update
An update for libpcap is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
DSA-6544-1 sabnzbdplus – security update
https://security-tracker.debian.org/tracker/DSA-6544-1
DSA-6543-1 libreoffice – security update
https://security-tracker.debian.org/tracker/DSA-6543-1
USN-8871-1: Linux kernel (Raspberry Pi) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory