Advisories

Vendor and authority advisories

Security advisories published by software and hardware vendors and national cyber authorities, in one place.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 7 sources · Get these by email

Vulnerabilities & exploits CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
Vulnerabilities & exploits CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
Vulnerabilities & exploits CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
Vulnerabilities & exploits CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
Network & security devices Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple… Cisco Security Advisories · Global · 14 Oct 2026
Cloud & SaaS CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
Network & security devices Cisco Secure Email Gateway Arbitrary File Write VulnerabilityA vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation… Cisco Security Advisories · Global · 14 Oct 2026
Cloud & SaaS CVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
Vulnerabilities & exploits CVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
Vulnerabilities & exploits PAN-SA-2026-0013 Chromium: Monthly Vulnerability Update (October 2026) (Severity: HIGH) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
Vulnerabilities & exploits CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
Vulnerabilities & exploits CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
Vulnerabilities & exploits CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
Vulnerabilities & exploits CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
Network & security devices Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass VulnerabilityA vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access… Cisco Security Advisories · Global · 13 Oct 2026
Threats, ransomware & breaches Persistent Denial of Service in Admin ProfileCVSSv3 Score: 4.8 An Uncaught Exception vulnerability [CWE-248] in FortiSandbox may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests. Revised on 2026-10-13 00:00:00 Fortinet PSIRT · Global · 13 Oct 2026
Applications & supply chain SQL command injection in webmailCVSSv3 Score: 7.7 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] in FortiMail webmail may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. Revised on 2026-10-13 00:00:00 Fortinet PSIRT · Global · 13 Oct 2026
Threats, ransomware & breaches arbitrary command execution in fgfmsd daemonCVSSv3 Score: 5.3 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiManager fgfmd daemon may allow a remote attacker impersonating a fortimanager cluster node to execute unauthorized code or commands via specially crafted… Fortinet PSIRT · Global · 13 Oct 2026
Threats, ransomware & breaches Arbitrary file write in grpc phQueryMasterCVSSv3 Score: 9.4 An Improper limitation of a pathname to a restricted directory ('path traversal') [CWE-22] in FortiSIEM may allow an unauthenticated attacker to execute unauthorized code or commands via specially crafted packets. Revised on 2026-10-13 00:00:00 Fortinet PSIRT · Global · 13 Oct 2026
Threats, ransomware & breaches Broken authorizationCVSSv3 Score: 3.4 A missing authorization vulnerability [CWE-862] in FortiSIEM GUI may allow an authenticated attacker to execute unauthorized code or commands via Specially crafted HTTP requests Revised on 2026-10-13 00:00:00 Fortinet PSIRT · Global · 13 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.