Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,725Advisories collected
6,292Published or updated in 30 days
6,968Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,725 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2023-31147
MediumCVSS 6.5

Insufficient randomness in generation of DNS query IDs in c-ares

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 grpc 1.42.0-7 on Azure Linux 3.0, cm1 c-ares 1.19.1-1 on CBL Mariner 1.0, cbl2 python-gevent 21.1.2-3 on CBL Mariner 2.0, cbl2 nodejs18 18.17.1-2 on CBL Mariner 2.0
Fixed versions1.62.0-2, 1.19.1-1, 21.1.2-3, 18.17.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2023-31147
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-31130
MediumCVSS 6.4

Buffer Underwrite in ares_inet_net_pton()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscm1 c-ares 1.19.1-1 on CBL Mariner 1.0, cbl2 python-gevent 21.1.2-3 on CBL Mariner 2.0, cbl2 nodejs18 18.17.1-2 on CBL Mariner 2.0, cbl2 nodejs 16.20.1-2 on CBL Mariner 2.0
Fixed versions1.19.1-1, 21.1.2-3, 18.17.1-2, 16.20.1-2
Vendor guidance

CBL-Mariner Releases

CVE-2023-31130
Read the vendor advisory Watch this product
Ubuntu Security NoticesUSN-8947-1
Severity not listed

USN-8947-1: NSS update

This update removes the "emSign ECC Root CA - G3" and "Comodo AAA Services root" CA certificate due to intermediate CA certificates being compromised.

Read the vendor advisory
Ubuntu Security NoticesUSN-8950-1
Severity not listed

USN-8950-1: poppler vulnerability

It was discovered that poppler incorrectly handled the password length limit when decrypting certain encrypted PDF files. An attacker could possibly use this issue to cause a denial of service.

Read the vendor advisory
Cisco Security Advisoriescisco-sa-notice-QGwHnJ6k
Informational

Cisco Advance Notification for Publication of October 21, 2026, Security Advisories

On October 21, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the following advisories.

Affected productsSnort 3, Cisco Expressway and Unified Communications Products, Cisco IOS XR Software and Secure Client
Vendor guidance

To remediate the vulnerabilities that were disclosed on October 21, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.

CVE-2026-20043CVE-2026-20236CVE-2026-20291CVE-2026-20356CVE-2026-76524CVE-2026-76489
Read the vendor advisory Watch this product
Cisco Security Advisoriescisco-sa-vcs-static-cred-hr7EWZ8t
Critical

Cisco Expressway Series Remote Code Execution Vulnerability

A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persisten...

Vendor guidance

Cisco has released software updates that address this vulnerability.

CVE-2026-76466
Read the vendor advisory
Cisco Security Advisoriescisco-sa-sec-client-priv-esc-muF8eZdm
High

Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability

A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-s...

Vendor guidance

Cisco has released software updates that address this vulnerability.

CVE-2026-76462
Read the vendor advisory
Cisco Security Advisoriescisco-sa-opensrc-snort3-2fXGJPfe
High

Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability

A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local us...

Vendor guidance

Cisco has released software updates that address this vulnerability.

CVE-2026-76524
Read the vendor advisory
Cisco Security Advisoriescisco-sa-asr9k-tUyxcyXN
High

Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability

A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9902 and 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to ...

Affected productsASR 9000 Series Aggregation Services Routers if they have a Lightspeed- or Lightspeed-Plus-based line card installed, ASR 9900 Series Aggregation Services Routers if they have a Lightspeed- or Lightspeed-Plus-based line card installed, ASR 9902 Compact High-Performance Routers, ASR 9903 Compact High-Performance Routers
Vendor guidance

Cisco has released software updates that address this vulnerability.

CVE-2026-76505
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources