ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-453E devices. Authentication is
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
ZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library
ZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain
CVE-2026-93953
Severity Not Scored Description The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to
CVE-2026-85634
High Severity Description A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used
CVE-2026-78851
High Severity Description Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain
Targeted ads delivered 0-click exploits to install mercenary malware
Researchers say that mercenary hackers laced ads with zero-click exploits that installed sophisticated malware on the devices of
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online –
DSA-6562-1 chromium – security update
https://security-tracker.debian.org/tracker/DSA-6562-1
Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisors
Bulletin ID: 2026-137-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/15/2026 10:30 AM PDT Description: AWS
SUSE Linux security advisory (AV26-1053)
<article data-history-node-id="8386" about="/en/alerts-advisories/suse-linux-security-advisory-av26-1053" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
[Control systems] Johnson Controls security advisory (AV26-1052)
<article data-history-node-id="8385" about="/en/alerts-advisories/control-systems-johnson-controls-security-advisory-av26-1052" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder