CVE-2026-45580
Medium Severity Description AVideo: stored XSS via unescaped stream key in modeYoutubeLive.php class attribute Read more at https://www.tenable.com/cve/CVE-2026-45580
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
The Boring Stuff is Dangerous Now
AI agents capable of discovering and exploiting obscure vulnerabilities are emerging alongside developers producing vast amounts of potentially
DSA-6275-1 linux – security update
https://security-tracker.debian.org/tracker/DSA-6275-1
DSA-6274-1 linux – security update
https://security-tracker.debian.org/tracker/DSA-6274-1
DSA-6273-1 chromium – security update
https://security-tracker.debian.org/tracker/DSA-6273-1
FreePBX security advisory (AV26–474)
<article data-history-node-id="7707" about="/en/alerts-advisories/freepbx-security-advisory-av26-474" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Funnel Builder WordPress plugin bug exploited to steal credit cards
A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript
A hotel check-in system left a million passports and driver’s licenses open for anyone to see
The tech company that maintains the hotel check-in system set its cloud storage to public, allowing anyone to
RHSA-2026:17795: Critical: kernel security update
An update for kernel is now available for NVIDIA for RHEL 10. Red Hat Product Security has rated
3 sources
Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own
During the second day of Pwn2Own Berlin 2026, competitors collected $385,750 in cash awards after exploiting 15 unique
Connected reporting, one intelligence threadbleepingcomputer.com · cybersecuritynews.com