Improper limitation of a pathname to a restricted directory
CVSSv3 Score: 9.8 An Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) [CWE-22] and Improper
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
RHSA-2026:74499: Important: dracut security update
An update for dracut is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support – EXTENSION.
Observability’s AI Moment
Introducing Cortex XCOR: AI-Driven Observability that Delivers Autonomous Response with AI SRE I’ve been tackling the observability problem
“SASE Gateway” provided by KDDI : How SP Interconnect Simplifies Closed Network Zero Trust
We are thrilled to announce that KDDI Corporation, a long-standing NextWave partner of Palo Alto Networks and a
Introducing CLARA Agent: Instant Cloud & AI Risk Insights Available on Google Cloud Gemini Enterprise
Most cloud and security teams struggle with two fundamental questions: What is actually running across our clouds, and
USN-8862-1: libXpm vulnerability
It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could
USN-8861-1: OpenSSL vulnerabilities
It was discovered that OpenSSL had an inefficient algorithm in its QUIC stream reassembly implementation. A remote attacker
RHSA-2026:74471: Critical: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat
RHSA-2026:74470: Important: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
RHSA-2026:74464: Moderate: ghostscript security update
An update for ghostscript is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has
USN-8860-1: OpenStack Designate vulnerability
It was discovered that OpenStack Designate did not properly validate overlapping zones under certain circumstances. An authenticated user
CVE-2026-47096
Medium Severity Description AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated