CVE-2026-18353
High Severity Description PIA’s `POST /v1/upload/sbom` endpoint accepts a Bearer JWT and checks its **unverified** `iss` claim against
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
CVE-2026-44108
Critical Severity Description Due to a flaw in the execution order of scripts during shutdown, the firewall is
51 sources
RHSA-2026:48603: Important: hplip security update
An update for hplip is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Connected reporting, one intelligence threadaccess.redhat.com
3 sources
RHSA-2026:47755: Moderate: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
Connected reporting, one intelligence threadaccess.redhat.com
RHSA-2026:47718: Important: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
RHSA-2026:47731: Important: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
5 sources
RHSA-2026:47722: Important: grafana security, bug fix, and enhancement update
An update for grafana is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Connected reporting, one intelligence threadaccess.redhat.com
DSA-6403-1 nss – security update
https://security-tracker.debian.org/tracker/DSA-6403-1
3 sources
RHSA-2026:47772: Important: mariadb-connector-c security update
An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat
Connected reporting, one intelligence threadaccess.redhat.com
ZDI-26-501: WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability
This vulnerability allows remote attackers to create arbitrary files on affected installations of WatchGuard FireWare OS. Authentication is
ZDI-26-500: WatchGuard FireWare OS networkd network_wireless_kick_off_user_cb Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is
ZDI-26-499: WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is