RHSA-2026:49513: Important: dovecot security update
An update for dovecot is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
RHSA-2026:49509: Important: rhc security update
An update for rhc is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
CVE-2026-12231
Medium Severity Description The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
CVE-2026-18572
Medium Severity Description Keycloak provides authorization services that allow administrators to restrict access to resources based on time
CVE-2026-18573
Medium Severity Description A flaw was found in the keycloak-services component of Keycloak, which is used for managing
DSA-6410-1 libssh – security update
https://security-tracker.debian.org/tracker/DSA-6410-1
USN-4901-1: Linux kernel (Trusty HWE) vulnerabilities
Adam Nichols discovered that heap overflows existed in the iSCSI subsystem in the Linux kernel. A local attacker
USN-4737-2: Bind vulnerability
USN-4737-1 fixed a vulnerability in Bind. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu
USN-4692-1: tar vulnerabilities
Chris Siebenmann discovered that tar incorrectly handled extracting files resized during extraction when invoked with the –sparse flag.
USN-4705-2: Sudo vulnerability
USN-4705-1 fixed a vulnerability in Sudo. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu
CVE-2026-6453
Medium Severity Description The CubeWP Framework plugin for WordPress is vulnerable to SQL Injection in all versions up
CVE-2026-18344
Medium Severity Description The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via