Vendor and authority advisories

Search Search

Category

• All
• Threats, ransomware & breaches
• Vulnerabilities & exploits
• Network & security devices
• Cloud & SaaS
• Hardware & firmware
• Identity & access
• OT, ICS & IoT
• Applications & supply chain
• AI security
• Policy, regulation & law enforcement

Region

• All regions
• Global
• United States
• European Union

• Vulnerabilities & exploits CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux Kernel Missing Initialization of a Variable Vulnerability These types of… CISA Cybersecurity Advisories · United States · 28 Oct 2026
• Vulnerabilities & exploits CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-111497 Google Brotli Unchecked Return Value… CISA Cybersecurity Advisories · United States · 27 Oct 2026
• Vulnerabilities & exploits Node2Shell CVEsCVSSv3 Score: 9.8 CVE-2026-105482 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-105483 - (high)This vulnerability affects Node.js 26.x and 24.x.CVE-2026-106069 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-111497 - (high)A flaw in Node.js can… Fortinet PSIRT · Global · 26 Oct 2026
• Vulnerabilities & exploits USN-8953-1: OpenVPN vulnerabilityIt was discovered that OpenVPN incorrectly handled certificate subject fields. A remote authenticated user could possibly use this issue to impersonate other users. Ubuntu Security Notices · Global · 22 Oct 2026
• Vulnerabilities & exploits 2026-019: Critical Vulnerability in GitLab Community and Enterprise EditionsOn 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server. CERT-EU recommends organisations to update affected assets as soon as possible,… CERT-EU Security Advisories · European Union · 22 Oct 2026
• Vulnerabilities & exploits PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)CVSSv3 Score: 9.8 CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The… Fortinet PSIRT · Global · 21 Oct 2026
• Vulnerabilities & exploits CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 17 Oct 2026
• Vulnerabilities & exploits CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
• Vulnerabilities & exploits CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
• Vulnerabilities & exploits CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
• Vulnerabilities & exploits CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW) Palo Alto Networks Security Advisories · Global · 15 Oct 2026
• Vulnerabilities & exploits CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
• Vulnerabilities & exploits CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
• Vulnerabilities & exploits CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
• Vulnerabilities & exploits PAN-SA-2026-0013 Chromium: Monthly Vulnerability Update (October 2026) (Severity: HIGH) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
• Vulnerabilities & exploits CVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
• Vulnerabilities & exploits CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 14 Oct 2026
• Vulnerabilities & exploits 2026-015: Critical Vulnerability in Multiple Atlassian ProductsOn 5 October 2026, Atlassian published a security advisory addressing a critical arbitrary file access vulnerability. It affects Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and… CERT-EU Security Advisories · European Union · 7 Oct 2026
• Vulnerabilities & exploits CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 12 Sep 2026
• Vulnerabilities & exploits CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 12 Sep 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.