CVE-2026-71454
Medium Severity Description Improper neutralization of input during web page generation (‘cross-site scripting’) vulnerability in CWE-79 – Cross-site
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
CVE-2026-71452
High Severity Description – OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This
CVE-2026-71453
High Severity Description – External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows
USN-8863-1: GStreamer Good Plugins vulnerabilities
Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio streams. An attacker could possibly use
RHSA-2026:74613: Important: pcp security update
An update for pcp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
RHSA-2026:74612: Important: pcp security update
An update for pcp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
RHSA-2026:74506: Critical: Satellite 6.16.14 Async Update
An update is now available for Red Hat Satellite 6.16 for RHEL 8 and RHEL 9. Red Hat
RHSA-2026:73981: Important: Red Hat JBoss Web Server 6.2.5 release and security update
Red Hat JBoss Web Server 6.2.5 is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise
RHSA-2026:74504: Critical: Satellite 6.18.10 Async Update
A new release is now available for Red Hat Satellite 6.18 for RHEL 9. Red Hat Product Security
RHSA-2026:74581: Important: skopeo security update
An update for skopeo is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
RHSA-2026:73982: Important: Red Hat JBoss Web Server 6.2.5 release and security update
Red Hat JBoss Web Server 6.2.5 zip release is now available for Red Hat Enterprise Linux 8, Red
ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first