Advisories

Vendor and authority advisories

Security advisories published by software and hardware vendors and national cyber authorities, in one place.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 7 sources · Get these by email

Threats, ransomware & breaches EPICS BaseView CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code. The following versions of EPICS Base are affected: EPICS Base release <=7.0.10… CISA Cybersecurity Advisories · United States · 27 Oct 2026
Vulnerabilities & exploits CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-111497 Google Brotli Unchecked Return Value… CISA Cybersecurity Advisories · United States · 27 Oct 2026
Threats, ransomware & breaches Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizVizView CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perform arbitrary operations (CVE-2026-16438), resulting in information disclosure, tampering with,… CISA Cybersecurity Advisories · United States · 27 Oct 2026
Threats, ransomware & breaches USN-8956-1: Brotli vulnerabilityIt was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. Ubuntu Security Notices · Global · 26 Oct 2026
Threats, ransomware & breaches USN-8955-1: nginx vulnerabilitiesIt was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-15176) It was discovered… Ubuntu Security Notices · Global · 26 Oct 2026
Applications & supply chain CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog and updated the PHP Alert, Critical Vulnerabilities in PHP Require Immediate Patching: CVE-2026-109618 – PHP Memory Corruption Vulnerability CVE-2026-109619 – PHP Stale Internal Request-State Vulnerability… CISA Cybersecurity Advisories · United States · 26 Oct 2026
Vulnerabilities & exploits Node2Shell CVEsCVSSv3 Score: 9.8 CVE-2026-105482 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-105483 - (high)This vulnerability affects Node.js 26.x and 24.x.CVE-2026-106069 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-111497 - (high)A flaw in Node.js can… Fortinet PSIRT · Global · 26 Oct 2026
Applications & supply chain 2026-018: Critical Vulnerabilities in PHPOn 20 October 2026, the PHP project announced an upcoming security release addressing two critical vulnerabilities in PHP. Public reports indicated that these vulnerabilities could lead to remote code execution (RCE). The PHP team released the fixes today, 21 October 2026 at 13:30 UTC, in PHP… CERT-EU Security Advisories · European Union · 23 Oct 2026
Applications & supply chain CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-114625 Arista VeloCloud Orchestrator SQL Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses… CISA Cybersecurity Advisories · United States · 23 Oct 2026
Threats, ransomware & breaches CISA Adds One Known Exploited Vulnerability to CatalogCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber… CISA Cybersecurity Advisories · United States · 23 Oct 2026
Threats, ransomware & breaches USN-8954-1: zlib vulnerabilityAli Firas discovered that zlib incorrectly handled certain non-blocking write operations. An attacker could possibly use this issue to trigger a heap buffer overflow, resulting in a denial of service or arbitrary code execution. Ubuntu Security Notices · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 SMTP MIME Denial of Service VulnerabilityMultiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMTP header are parsed.… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Denial of Service VulnerabilitiesMultiple Cisco products are affected by vulnerabilities in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. For more information about these… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service VulnerabilityMultiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine. This vulnerability is… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Denial of Service VulnerabilityMultiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a flaw in logic handling… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service VulnerabilityA vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is… Cisco Security Advisories · Global · 22 Oct 2026
Vulnerabilities & exploits USN-8953-1: OpenVPN vulnerabilityIt was discovered that OpenVPN incorrectly handled certificate subject fields. A remote authenticated user could possibly use this issue to impersonate other users. Ubuntu Security Notices · Global · 22 Oct 2026
Threats, ransomware & breaches USN-8952-1: Tornado vulnerabilitiesIt was discovered that Tornado did not properly handle certain HTTP requests and network inputs. An attacker could possibly use these issues to cause a denial of service, expose sensitive information, or bypass access controls. (CVE-2023-54397, CVE-2024-14029, CVE-2026-91990, CVE-2026-91992,… Ubuntu Security Notices · Global · 22 Oct 2026
OT, ICS & IoT Siemens RUGGEDCOM CROSSBOWView CSAF Summary RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system… CISA Cybersecurity Advisories · United States · 22 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.