Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
16,745 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF
Open the original vendor bulletin for the full description and affected-version details.
This issue was remediated server-side; no customer action is required.
CVE-2026-10740 - Excessive memory allocation in s2n-quic
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-14471 - Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registry
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-14265- Deserialization of Untrusted Data in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-12043 - Heap double-free in AWS Common Runtime aws-c-http
Open the original vendor bulletin for the full description and affected-version details.
We identified CVE-2026-12043, an issue where improper handling of HPACK dynamic table size updates in the AWS Common Runtime aws-c-http library might allow a remote actor operating a server to cause memory corruption ...
CVE-2026-13760 - OS Command Injection in NodejsFunction Docker Bundling in aws-cdk-lib
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-11931 - Insecure Permissions on Authentication Token Cache File in Kiro IDE
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-13769 - Insecure file permissions in AWS CLI
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-11400 and CVE-2026-11401
Open the original vendor bulletin for the full description and affected-version details.
Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 & CVE-2026-8597)
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-31431
Open the original vendor bulletin for the full description and affected-version details.
As a best practice, AWS recommends that you apply all security patches and software version updates as soon as they become available.
CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-8686 - Heap out-of-bounds read in coreMQTT MQTT5 property parsing
Open the original vendor bulletin for the full description and affected-version details.
Dirty Frag and other issues in Amazon Linux kernels
Open the original vendor bulletin for the full description and affected-version details.
Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel
Open the original vendor bulletin for the full description and affected-version details.
Please refer to our Security Bulletin (ID: 2026-030-AWS) for the most updated patching information.
Ongoing updates on Copy.fail and variants
Open the original vendor bulletin for the full description and affected-version details.
This bulletin will be updated as more information becomes available.
CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials
Open the original vendor bulletin for the full description and affected-version details.
Issue with AWS Ops Wheel (CVE-2026-6911 and CVE-2026-6912
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-5190 - AWS C Event Stream Streaming Decoder Stack Buffer Overflow
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-5747 - Out-of-bounds Write in Firecracker virtio-pci Transport
Open the original vendor bulletin for the full description and affected-version details.
CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS
Open the original vendor bulletin for the full description and affected-version details.
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.