https://advisoryloom.com/almain Weaving cybersecurity advisories into one clear view Tue, 02 Jun 2026 02:02:44 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://advisoryloom.com/almain/wp-content/uploads/2026/04/cropped-ChatGPT-Image-Apr-17-2026-03_10_38-PM-32x32.png https://advisoryloom.com/almain 32 32 ISC Stormcast For Tuesday, June 2nd, 2026 https://isc.sans.edu/podcastdetail/9954, (Tue, Jun 2nd) https://isc.sans.edu/diary/rss/33038 Tue, 02 Jun 2026 02:02:44 +0000 https://advisoryloom.com/almain/isc-stormcast-for-tuesday-june-2nd-2026-https-isc-sans-edu-podcastdetail-9954-tue-jun-2nd/ USN-8361-1: Linux kernel vulnerability https://ubuntu.com/security/notices/USN-8361-1 Mon, 01 Jun 2026 23:32:18 +0000 https://advisoryloom.com/almain/usn-8361-1-linux-kernel-vulnerability/ A security issue was discovered in the Linux kernel.
An attacker could possibly use this to compromise the system.
This update corrects flaws in the following subsystem:
– Packet sockets;
(CVE-2026-31504) ]]> RHSA-2026:22330: Important: fence-agents security update https://access.redhat.com/errata/RHSA-2026:22330 Mon, 01 Jun 2026 23:32:16 +0000 https://advisoryloom.com/almain/rhsa-202622330-important-fence-agents-security-update/ An update for fence-agents is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

]]> RHSA-2026:22329: Important: openssh security update https://access.redhat.com/errata/RHSA-2026:22329 Mon, 01 Jun 2026 23:32:16 +0000 https://advisoryloom.com/almain/rhsa-202622329-important-openssh-security-update/ An update for openssh is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

]]> RHSA-2026:22328: Important: java-21-ibm-semeru-certified-jdk security update https://access.redhat.com/errata/RHSA-2026:22328 Mon, 01 Jun 2026 23:32:16 +0000 https://advisoryloom.com/almain/rhsa-202622328-important-java-21-ibm-semeru-certified-jdk-security-update/ An update for java-21-ibm-semeru-certified-jdk is now available for Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 10, and Red Hat Enterprise Linux 10.2 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

]]> Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks https://www.bleepingcomputer.com/news/security/hackers-hijack-thousands-of-sites-for-clickfix-and-fakeupdate-attacks/ Mon, 01 Jun 2026 23:31:53 +0000 https://advisoryloom.com/almain/hackers-hijack-thousands-of-sites-for-clickfix-and-fakeupdate-attacks/ A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and FakeUpdates techniques on compromised sites. […] ]]> CVE-2026-8206 https://www.tenable.com/cve/CVE-2026-8206 Mon, 01 Jun 2026 22:04:48 +0000 https://advisoryloom.com/almain/cve-2026-8206/

Severity Not Scored

Description

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions 6.0.0 to 6.0.6. This is due to the plugin accepting an arbitrary email address when a username is used in the password reset request. This makes it possible for unauthenticated attackers to send a password reset link for any user registered on the site to their own email address.

Read more at https://www.tenable.com/cve/CVE-2026-8206

]]> CVE-2026-10249 https://www.tenable.com/cve/CVE-2026-10249 Mon, 01 Jun 2026 22:04:48 +0000 https://advisoryloom.com/almain/cve-2026-10249/

Medium Severity

Description

A vulnerability was identified in itsourcecode Online Blood Bank Management System 1.0. Impacted…

Read more at https://www.tenable.com/cve/CVE-2026-10249

]]> CVE-2026-10246 https://www.tenable.com/cve/CVE-2026-10246 Mon, 01 Jun 2026 22:04:48 +0000 https://advisoryloom.com/almain/cve-2026-10246/

Medium Severity

Description

A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function create_medicine_presentation of the file /ShowForm/create_medicine_presentation/main. The manipulation of the argument medicine_presentation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Read more at https://www.tenable.com/cve/CVE-2026-10246

]]> Anthropic to Open Mythos AI to EU’s ENISA https://www.darkreading.com/cyber-risk/anthropic-mythos-ai-eu-enisa Mon, 01 Jun 2026 22:04:42 +0000 https://advisoryloom.com/almain/anthropic-to-open-mythos-ai-to-eus-enisa/ The European security agency’s entry to Project Glasswing is the result of “strong bilateral cooperation” between the European Commission and Anthropic. ]]>