Advisories

Vendor and authority advisories

Security advisories published by software and hardware vendors and national cyber authorities, in one place.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 7 sources · Get these by email

Network & security devices Cisco Finesse Server-Side Request Forgery VulnerabilityA vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker… Cisco Security Advisories · Global · 29 Oct 2026
Threats, ransomware & breaches USN-8958-1: .NET vulnerabilitiesIt was discovered that the .NET Blazor WebAssembly debug proxy did not properly escape certain values. An attacker could possibly use this issue to execute arbitrary code. The fix for this CVE was originally released via USN-8942-1, but it was found to be incomplete. This issue only affected… Ubuntu Security Notices · Global · 29 Oct 2026
Vulnerabilities & exploits CVE-2026-88078 Microsoft Edge (Chromium-based) Spoofing VulnerabilityCWE added. Informational change only. Microsoft Security Response Center · Global · 29 Oct 2026
Network & security devices CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerability CVE-2026-76418 Cisco Secure Firewall ASA Software and… CISA Cybersecurity Advisories · United States · 29 Oct 2026
Threats, ransomware & breaches Hitachi Energy TRO600 series productsView CSAF Summary Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to carry out further attacks and disclosure of sensitive information. Please refer to… CISA Cybersecurity Advisories · United States · 29 Oct 2026
OT, ICS & IoT Siemens Mendix SAML ModuleView CSAF Summary Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for the affected… CISA Cybersecurity Advisories · United States · 29 Oct 2026
Vulnerabilities & exploits Hitachi Energy CoreTec ProductView CSAF Summary Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of the product.… CISA Cybersecurity Advisories · United States · 29 Oct 2026
Vulnerabilities & exploits CVE-2026-19175 Use after free in PaymentsInformation published. Microsoft Security Response Center · Global · 29 Oct 2026
Network & security devices Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityA vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication… Cisco Security Advisories · Global · 28 Oct 2026
Network & security devices Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityA vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of… Cisco Security Advisories · Global · 28 Oct 2026
Identity & access Cisco Advance Notification for Publication of November 4, 2026, Security AdvisoriesOn November 4, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Identity Services Engine (ISE) UCS Central Software Unified Communications… Cisco Security Advisories · Global · 28 Oct 2026
Vulnerabilities & exploits CVE-2026-62877 Windows Win32k Elevation of Privilege VulnerabilityAdded supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability. Microsoft Security Response Center · Global · 28 Oct 2026
Vulnerabilities & exploits CVE-2026-57083 Windows Media Photo Codec Information Disclosure VulnerabilityAdded supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability. Microsoft Security Response Center · Global · 28 Oct 2026
Vulnerabilities & exploits CVE-2026-57084 Windows File Explorer Information Disclosure VulnerabilityAdded supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability. Microsoft Security Response Center · Global · 28 Oct 2026
Vulnerabilities & exploits CVE-2026-62740 Windows Imaging Component Information Disclosure VulnerabilityAdded supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability. Microsoft Security Response Center · Global · 28 Oct 2026
Vulnerabilities & exploits CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux Kernel Missing Initialization of a Variable Vulnerability These types of… CISA Cybersecurity Advisories · United States · 28 Oct 2026
Threats, ransomware & breaches USN-8956-2: Brotli vulnerabilityUSN-8956-1 fixed a vulnerability in Brotli. This update provides the corresponding fixes for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this… Ubuntu Security Notices · Global · 27 Oct 2026
Identity & access USN-8957-1: authd vulnerabilityAli Mashally discovered that authd did not properly validate user identities when matching accounts from identity providers. An attacker could possibly use this issue to gain access to another user's local account and files, resulting in unauthorized access to sensitive information. Ubuntu Security Notices · Global · 27 Oct 2026
Network & security devices Cisco Unified Communications Products Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P),… Cisco Security Advisories · Global · 27 Oct 2026
Network & security devices Cisco Expressway Series Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered… Cisco Security Advisories · Global · 27 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.