Advisories

Vendor and authority advisories

Security advisories published by software and hardware vendors and national cyber authorities, in one place.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 7 sources · Get these by email

Network & security devices Cisco Advance Notification for Publication of October 7, 2026, Security AdvisoriesOn October 7, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the advisories that are listed in the following tables. To remediate the vulnerabilities that were disclosed on October 7, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution VulnerabilitiesMultiple vulnerabilities in the Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as Next Generation OAM (NGOAM), could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco NX-OS Software Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco License (Smart Software Manager) On-Prem VulnerabilitiesMultiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow a remote attacker to gain unauthorized access, access sensitive information, cause a denial of service (DoS)… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco NX-OS Software Control Plane Denial of Service VulnerabilityA vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability… Cisco Security Advisories · Global · 7 Oct 2026
Policy, regulation & law enforcement Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass VulnerabilityA vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases… Cisco Security Advisories · Global · 7 Oct 2026
Policy, regulation & law enforcement Cisco Application Policy Infrastructure Controller API Command Injection VulnerabilityA vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This… Cisco Security Advisories · Global · 7 Oct 2026
Policy, regulation & law enforcement Cisco Application Policy Infrastructure Controller Unauthorized File Access VulnerabilityA vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution VulnerabilityA vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco NX-OS Software Python Sandbox Escape VulnerabilityA vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient… Cisco Security Advisories · Global · 7 Oct 2026
Vulnerabilities & exploits 2026-015: Critical Vulnerability in Multiple Atlassian ProductsOn 5 October 2026, Atlassian published a security advisory addressing a critical arbitrary file access vulnerability. It affects Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and… CERT-EU Security Advisories · European Union · 7 Oct 2026
Network & security devices Cisco Catalyst SD-WAN Manager API Authentication Bypass VulnerabilityA vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request,… Cisco Security Advisories · Global · 2 Oct 2026
Network & security devices Cisco IOS XE Software Security Hardening Release: August 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These… Cisco Security Advisories · Global · 2 Oct 2026
Network & security devices CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 2 Oct 2026
Threats, ransomware & breaches Improper limitation of a pathname to a restricted directoryCVSSv3 Score: 9.8 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] and Improper Neutralization of NULL Byte or NULL Character [CWE-158] vulnerability may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP… Fortinet PSIRT · Global · 1 Oct 2026
Network & security devices 2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and GatewayOn 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, among which 2 critical unauthenticated Remote Code Execution (RCE) vulnerabilities. Citrix has confirmed active exploitation of… CERT-EU Security Advisories · European Union · 27 Sep 2026
Identity & access Cisco Identity Services Engine Authentication Bypass VulnerabilitiesMultiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to access or manipulate data, obtain sensitive information, or cause a reload of certificate and key material on an affected device. For more… Cisco Security Advisories · Global · 24 Sep 2026
Network & security devices Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service VulnerabilityUpdate for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv) models. However, it was later found that this vulnerability affects all Cisco Secure Firewall… Cisco Security Advisories · Global · 23 Sep 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.