Advisories

Vendor and authority advisories

Security advisories published by software and hardware vendors and national cyber authorities, in one place.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 7 sources · Get these by email

Network & security devices Multiple Cisco Products Snort 3 Denial of Service VulnerabilitiesMultiple Cisco products are affected by vulnerabilities in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. For more information about these… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service VulnerabilityMultiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine. This vulnerability is… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Denial of Service VulnerabilityMultiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a flaw in logic handling… Cisco Security Advisories · Global · 22 Oct 2026
Network & security devices Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service VulnerabilityA vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is… Cisco Security Advisories · Global · 22 Oct 2026
Vulnerabilities & exploits USN-8953-1: OpenVPN vulnerabilityIt was discovered that OpenVPN incorrectly handled certificate subject fields. A remote authenticated user could possibly use this issue to impersonate other users. Ubuntu Security Notices · Global · 22 Oct 2026
Threats, ransomware & breaches USN-8952-1: Tornado vulnerabilitiesIt was discovered that Tornado did not properly handle certain HTTP requests and network inputs. An attacker could possibly use these issues to cause a denial of service, expose sensitive information, or bypass access controls. (CVE-2023-54397, CVE-2024-14029, CVE-2026-91990, CVE-2026-91992,… Ubuntu Security Notices · Global · 22 Oct 2026
Threats, ransomware & breaches USN-8890-2: libsoup vulnerabilitiesUSN-8890-1 fixed vulnerabilities in libsoup. This update provides the corresponding updates for libsoup3 on Ubuntu 26.10. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of… Ubuntu Security Notices · Global · 21 Oct 2026
Threats, ransomware & breaches USN-8951-1: c-ares vulnerabilitiesIt was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-22217) It was discovered that c-ares… Ubuntu Security Notices · Global · 21 Oct 2026
Network & security devices Cisco Advance Notification for Publication of October 21, 2026, Security AdvisoriesOn October 21, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories. To remediate the vulnerabilities that were disclosed on October 21, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco Expressway Series Remote Code Execution VulnerabilityA vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persistent cookies.… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco Secure Client Secure Firewall Posture Module Privilege Escalation VulnerabilityA vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An… Cisco Security Advisories · Global · 21 Oct 2026
Applications & supply chain Open Source Snort 3 Control Channel Socket Arbitrary Command Execution VulnerabilityA vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco Unified Communications Manager Improper Access Control VulnerabilityA vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service VulnerabilityA vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause network… Cisco Security Advisories · Global · 21 Oct 2026
Network & security devices Cisco Expressway Series Information Disclosure VulnerabilityA vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to insufficient authorization checks of HTTP requests during Mobile and Remote Access (MRA) provisioning. An attacker could… Cisco Security Advisories · Global · 21 Oct 2026
Vulnerabilities & exploits PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)CVSSv3 Score: 9.8 CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The… Fortinet PSIRT · Global · 21 Oct 2026
Network & security devices Cisco Unified Intelligence Center SQL Injection VulnerabilityA vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could… Cisco Security Advisories · Global · 20 Oct 2026
Vulnerabilities & exploits CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM) Palo Alto Networks Security Advisories · Global · 17 Oct 2026
Network & security devices Cisco Meraki Security Hardening Release: October 2026As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found… Cisco Security Advisories · Global · 15 Oct 2026
Applications & supply chain CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (Severity: LOW) Palo Alto Networks Security Advisories · Global · 15 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.