Advisories

Vendor and authority advisories

Security advisories published by software and hardware vendors and national cyber authorities, in one place.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 7 sources · Get these by email

Network & security devices Cisco Unified Communications Manager Improper Access Control VulnerabilityA vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco Expressway Series Remote Code Execution VulnerabilityA vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persistent cookies.… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco Unified Intelligence Center SQL Injection VulnerabilityA vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could… Cisco Security Advisories · Global · 20 Oct 2026
Network & security devices Cisco Meraki Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found… Cisco Security Advisories · Global · 15 Oct 2026
Network & security devices Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple… Cisco Security Advisories · Global · 14 Oct 2026
Network & security devices Cisco Secure Email Gateway Arbitrary File Write VulnerabilityA vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation… Cisco Security Advisories · Global · 14 Oct 2026
Network & security devices Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass VulnerabilityA vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access… Cisco Security Advisories · Global · 13 Oct 2026
Network & security devices Double free in signal handlerCVSSv3 Score: 2.1 A Double Free vulnerability [CWE-415] in FortiOS, FortiProxy and FortiSwitch may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands. Revised on 2026-10-13 00:00:00 Fortinet PSIRT · Global · 13 Oct 2026
Network & security devices GUI Denial of ServiceCVSSv3 Score: 6.7 An Improper Locking vulnerability [CWE-667] in FortiOS may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests. Revised on 2026-10-13 00:00:00 Fortinet PSIRT · Global · 13 Oct 2026
Network & security devices Cisco NX-OS Software NX-API Remote Code Execution VulnerabilityA vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of data that is… Cisco Security Advisories · Global · 8 Oct 2026
Network & security devices Cisco Advance Notification for Publication of October 7, 2026, Security AdvisoriesOn October 7, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the advisories that are listed in the following tables. To remediate the vulnerabilities that were disclosed on October 7, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution VulnerabilitiesMultiple vulnerabilities in the Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as Next Generation OAM (NGOAM), could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco NX-OS Software Python Sandbox Escape VulnerabilityA vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution VulnerabilityA vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass VulnerabilityA vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco NX-OS Software Control Plane Denial of Service VulnerabilityA vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco License (Smart Software Manager) On-Prem VulnerabilitiesMultiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow a remote attacker to gain unauthorized access, access sensitive information, cause a denial of service (DoS)… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco NX-OS Software Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These… Cisco Security Advisories · Global · 7 Oct 2026
Network & security devices Cisco Catalyst SD-WAN Manager API Authentication Bypass VulnerabilityA vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request,… Cisco Security Advisories · Global · 2 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.