Advisories

Vendor and authority advisories

Security advisories published by software and hardware vendors and national cyber authorities, in one place.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 7 sources · Get these by email

Network & security devices Cisco Advance Notification for Publication of October 21, 2026, Security AdvisoriesOn October 21, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories. To remediate the vulnerabilities that were disclosed on October 21, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service VulnerabilityA vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco Expressway Series Information Disclosure VulnerabilityA vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access (MRA) provisioning. An attacker could… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco Unified Communications Manager Improper Access Control VulnerabilityA vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco Expressway Series Remote Code Execution VulnerabilityA vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persistent cookies.… Cisco Security Advisories · Global · 21 Oct 2026
Applications & supply chain Open Source Snort 3 Control Channel Socket Arbitrary Command Execution VulnerabilityA vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco Secure Client Secure Firewall Posture Module Privilege Escalation VulnerabilityA vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An… Cisco Security Advisories · Global · 21 Oct 2026
Vulnerabilities & exploits PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)CVSSv3 Score: 9.8 CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The… Fortinet PSIRT · Global · 21 Oct 2026
Network & security devices Cisco Unified Intelligence Center SQL Injection VulnerabilityA vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could… Cisco Security Advisories · Global · 20 Oct 2026
Vulnerabilities & exploits CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 17 Oct 2026
Network & security devices Cisco Meraki Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found… Cisco Security Advisories · Global · 15 Oct 2026
Applications & supply chain CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (Severity: LOW) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
Vulnerabilities & exploits CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
Vulnerabilities & exploits CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
Vulnerabilities & exploits CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
Vulnerabilities & exploits CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
Network & security devices 2026-017: Critical Vulnerability in Cisco Secure Email GatewayOn 14 October 2026, Cisco published a security advisory addressing a critical vulnerability affecting the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. This vulnerability could allow an unauthenticated, remote attacker to write arbitrary files and execute commands with… CERT-EU Security Advisories · European Union · 15 Oct 2026
Network & security devices Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple… Cisco Security Advisories · Global · 14 Oct 2026
Vulnerabilities & exploits CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
Vulnerabilities & exploits CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.