Advisories
Vendor and authority advisories
Security advisories published by software and hardware vendors and national cyber authorities, in one place.
Category
- All
- Threats, ransomware & breaches
- Vulnerabilities & exploits
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
- AI security
- Policy, regulation & law enforcement
Region
- Network & security devices Header injection in Web Filter warning pageCVSSv3 Score: 3.4 An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] in FortiOS and FortiProxy may allow an attacker in possession of a valid web filter override token to inject arbitrary headers via tricking a user into clicking on a… Fortinet PSIRT · Global · 14 Jul 2026
- Network & security devices Header injection in captive portal authentication formCVSSv3 Score: 3.1 An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] in FortiOS and FortiProxy captive portal may allow an attacker able to intercept and modify a user's authentication request to inject arbitrary headers via crafted… Fortinet PSIRT · Global · 14 Jul 2026
- Network & security devices Restricted CLI escape using LuaCVSSv3 Score: 6.7 An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] in FortiOS and FortiProxy may allow an authenticated admin to execute lua scripts via crafted CLI commands. Revised on 2026-06-09 00:00:00 Fortinet PSIRT · Global · 9 Jun 2026
Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.