Vendor and authority advisories

Search Search

Category

• All
• Threats, ransomware & breaches
• Vulnerabilities & exploits
• Network & security devices
• Cloud & SaaS
• Hardware & firmware
• Identity & access
• OT, ICS & IoT
• Applications & supply chain
• AI security
• Policy, regulation & law enforcement

Region

• All regions
• Global
• United States
• European Union

• Vulnerabilities & exploits CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 12 Sep 2026
• Vulnerabilities & exploits CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 12 Sep 2026
• Vulnerabilities & exploits CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 12 Sep 2026
• Vulnerabilities & exploits CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 9 Sep 2026
• Vulnerabilities & exploits CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 9 Sep 2026
• Vulnerabilities & exploits CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 9 Sep 2026
• Vulnerabilities & exploits 2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message ServerOn 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP)… CERT-EU Security Advisories · European Union · 9 Sep 2026
• Vulnerabilities & exploits Workflow session email approval process bypassCVSSv3 Score: 4.9 An improper access control vulnerability [CWE-284] in FortiManager may allow an administrator to bypass the approval process for workflow sessions via crafted HTTP or HTTPs requests. Revised on 2026-09-08 00:00:00 Fortinet PSIRT · Global · 8 Sep 2026
• Vulnerabilities & exploits HTTP/2 Bomb CVE-2026-49975CVSSv3 Score: 5.8 CVE-2026-49975Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67. Revised on 2026-08-19 00:00:00 Fortinet PSIRT · Global · 12 Aug 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.