CVE-2026-103001
Medium Severity Description PyJWT is a Python implementation of JSON Web Token standards. From 2.11.0 through 2.13.0, PyJWT’s
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
CVE-2026-101283
Critical Severity Description iperf3 3.20–3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer
RHSA-2026:74088: Important: python3.9 security update
An update for python3.9 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
RHSA-2026:74087: Important: python3.9 security update
An update for python3.9 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
RHSA-2026:74095: Important: rsync security, bug fix, and enhancement update
An update for rsync is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
RHSA-2026:74085: Important: nodejs:24 security, bug fix, and enhancement update
An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 8. Red Hat Product
RHSA-2026:74132: Moderate: kernel-rt security, bug fix, and enhancement update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
DSA-6532-1 tor – security update
https://security-tracker.debian.org/tracker/DSA-6532-1
DSA-6533-1 firefox-esr – security update
https://security-tracker.debian.org/tracker/DSA-6533-1
ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is
ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. An attacker
Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)
Unit 42 is aware of possible 0-day activity against NetScaler devices. Citrix reports CVE-2026-88771, CVE-2026-88772 have been exploited