Advisories

Vendor and authority advisories

Security advisories published by software and hardware vendors and national cyber authorities, in one place.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 7 sources · Get these by email

Threats, ransomware & breaches USN-8958-1: .NET vulnerabilitiesIt was discovered that the .NET Blazor WebAssembly debug proxy did not properly escape certain values. An attacker could possibly use this issue to execute arbitrary code. The fix for this CVE was originally released via USN-8942-1, but it was found to be incomplete. This issue only affected… Ubuntu Security Notices · Global · 29 Oct 2026
Vulnerabilities & exploits CVE-2026-88078 Microsoft Edge (Chromium-based) Spoofing VulnerabilityCWE added. Informational change only. Microsoft Security Response Center · Global · 29 Oct 2026
Vulnerabilities & exploits CVE-2026-19175 Use after free in PaymentsInformation published. Microsoft Security Response Center · Global · 29 Oct 2026
Network & security devices Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityA vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication… Cisco Security Advisories · Global · 28 Oct 2026
Network & security devices Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityA vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of… Cisco Security Advisories · Global · 28 Oct 2026
Identity & access Cisco Advance Notification for Publication of November 4, 2026, Security AdvisoriesOn November 4, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Identity Services Engine (ISE) UCS Central Software Unified Communications… Cisco Security Advisories · Global · 28 Oct 2026
Vulnerabilities & exploits CVE-2026-62740 Windows Imaging Component Information Disclosure VulnerabilityAdded supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability. Microsoft Security Response Center · Global · 28 Oct 2026
Vulnerabilities & exploits CVE-2026-62877 Windows Win32k Elevation of Privilege VulnerabilityAdded supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability. Microsoft Security Response Center · Global · 28 Oct 2026
Vulnerabilities & exploits CVE-2026-57083 Windows Media Photo Codec Information Disclosure VulnerabilityAdded supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability. Microsoft Security Response Center · Global · 28 Oct 2026
Vulnerabilities & exploits CVE-2026-57084 Windows File Explorer Information Disclosure VulnerabilityAdded supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability. Microsoft Security Response Center · Global · 28 Oct 2026
Threats, ransomware & breaches USN-8956-2: Brotli vulnerabilityUSN-8956-1 fixed a vulnerability in Brotli. This update provides the corresponding fixes for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this… Ubuntu Security Notices · Global · 27 Oct 2026
Identity & access USN-8957-1: authd vulnerabilityAli Mashally discovered that authd did not properly validate user identities when matching accounts from identity providers. An attacker could possibly use this issue to gain access to another user's local account and files, resulting in unauthorized access to sensitive information. Ubuntu Security Notices · Global · 27 Oct 2026
Network & security devices Cisco Unified Communications Products Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P),… Cisco Security Advisories · Global · 27 Oct 2026
Network & security devices Cisco Expressway Series Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered… Cisco Security Advisories · Global · 27 Oct 2026
Threats, ransomware & breaches USN-8956-1: Brotli vulnerabilityIt was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. Ubuntu Security Notices · Global · 26 Oct 2026
Threats, ransomware & breaches USN-8955-1: nginx vulnerabilitiesIt was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-15176) It was discovered… Ubuntu Security Notices · Global · 26 Oct 2026
Vulnerabilities & exploits Node2Shell CVEsCVSSv3 Score: 9.8 CVE-2026-105482 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-105483 - (high)This vulnerability affects Node.js 26.x and 24.x.CVE-2026-106069 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-111497 - (high)A flaw in Node.js can… Fortinet PSIRT · Global · 26 Oct 2026
Threats, ransomware & breaches USN-8954-1: zlib vulnerabilityAli Firas discovered that zlib incorrectly handled certain non-blocking write operations. An attacker could possibly use this issue to trigger a heap buffer overflow, resulting in a denial of service or arbitrary code execution. Ubuntu Security Notices · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 SMTP MIME Denial of Service VulnerabilityMultiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed.… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered… Cisco Security Advisories · Global · 22 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.