Advisories

Vendor and authority advisories

Security advisories published by software and hardware vendors and national cyber authorities, in one place.

Updated automatically every 6 hours. Last update 2 Nov 2026, 01:28 IST · 7 sources · Get these by email

Network & security devices CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL) Palo Alto Networks Security Advisories · Global · 31 Oct 2026
Network & security devices Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate AuthoritiesBetween October 17 and October 20, 2026, a critical security compromise involving Certificate Authorities that are managed by eMudhra was uncovered. A security researcher demonstrated that the private keys for eight eMudhra intermediate certificates were fundamentally broken due to an… Cisco Security Advisories · Global · 30 Oct 2026
Network & security devices Vulnerabilities in Node.js Affecting Cisco Products: October 2026On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The… Cisco Security Advisories · Global · 30 Oct 2026
Network & security devices Vulnerabilities in PHP Affecting Cisco Products: October 2026On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities: CVE-2026-109618 - RCE via OOM corruption CVE-2026-109619 - RCE via stale global state For information about these vulnerabilities, see the advisories… Cisco Security Advisories · Global · 30 Oct 2026
Network & security devices CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-118527 Ivanti Connect Secure Generation of Predictable… CISA Cybersecurity Advisories · United States · 30 Oct 2026
Network & security devices CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) Palo Alto Networks Security Advisories · Global · 29 Oct 2026
Network & security devices Cisco Finesse Server-Side Request Forgery VulnerabilityA vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker… Cisco Security Advisories · Global · 29 Oct 2026
Network & security devices CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerability CVE-2026-76418 Cisco Secure Firewall ASA Software and… CISA Cybersecurity Advisories · United States · 29 Oct 2026
Network & security devices Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityA vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication… Cisco Security Advisories · Global · 28 Oct 2026
Network & security devices Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service VulnerabilityA vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of… Cisco Security Advisories · Global · 28 Oct 2026
Network & security devices Cisco Unified Communications Products Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P),… Cisco Security Advisories · Global · 27 Oct 2026
Network & security devices Cisco Expressway Series Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered… Cisco Security Advisories · Global · 27 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 SMTP MIME Denial of Service VulnerabilityMultiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed.… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Denial of Service VulnerabilitiesMultiple Cisco products are affected by vulnerabilities in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. For more information about these… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service VulnerabilityMultiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine. This vulnerability is… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Denial of Service VulnerabilityMultiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a flaw in logic handling… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service VulnerabilityA vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Cisco Advance Notification for Publication of October 21, 2026, Security AdvisoriesOn October 21, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories. To remediate the vulnerabilities that were disclosed on October 21, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco Unified Communications Manager Improper Access Control VulnerabilityA vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to… Cisco Security Advisories · Global · 21 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.