September 8, 2026

Vendor Advisories

This category highlights official security advisories and bulletins from vendors, including patch notices, product-specific vulnerabilities, remediation guidance, and important updates affecting supported technologies and platforms.

ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability

ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability

Advisoryloom Editor July 15, 2026
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must...
Read More Read more about ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability
Drupal core – Moderately critical – Information disclosure – SA-CORE-2026-010 Drupal core – Moderately critical – Information disclosure – SA-CORE-2026-010

Drupal core – Moderately critical – Information disclosure – SA-CORE-2026-010

Advisoryloom Editor July 15, 2026
Project:  Drupal core Date:  2026-July-15 Security risk:  Moderately critical 10 ∕ 25 AC:Complex/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon Vulnerability:  Information disclosure Affected versions:  <10.6.13...
Read More Read more about Drupal core – Moderately critical – Information disclosure – SA-CORE-2026-010
Drupal core – Moderately critical – Cross-site scripting – SA-CORE-2026-011 Drupal core – Moderately critical – Cross-site scripting – SA-CORE-2026-011

Drupal core – Moderately critical – Cross-site scripting – SA-CORE-2026-011

Advisoryloom Editor July 15, 2026
Project:  Drupal core Date:  2026-July-15 Security risk:  Moderately critical 14 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All Vulnerability:  Cross-site scripting Affected versions:  >=11.3.0...
Read More Read more about Drupal core – Moderately critical – Cross-site scripting – SA-CORE-2026-011
Drupal core – Moderately critical – Cross-site scripting – SA-CORE-2026-012 Drupal core – Moderately critical – Cross-site scripting – SA-CORE-2026-012

Drupal core – Moderately critical – Cross-site scripting – SA-CORE-2026-012

Advisoryloom Editor July 15, 2026
Project:  Drupal core Date:  2026-July-15 Security risk:  Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability:  Cross-site scripting Affected versions:  <10.6.13...
Read More Read more about Drupal core – Moderately critical – Cross-site scripting – SA-CORE-2026-012
SVD-2026-0704: Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise SVD-2026-0704: Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

SVD-2026-0704: Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

Advisoryloom Editor July 15, 2026
In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0,...
Read More Read more about SVD-2026-0704: Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise
Editorial standards & methodology