Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,318Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-33055
Medium

tar-rs incorrectly ignores PAX size headers if header size is nonzero

Mariner

Affected productscbl2 kata-containers 3.2.0.azl2-7 on CBL Mariner 2.0, cbl2 kata-containers-cc 3.2.0.azl2-8 on CBL Mariner 2.0, azl3 kata-containers-cc 3.15.0.aks0-7 on Azure Linux 3.0, cbl2 rpm-ostree 2022.1-8 on CBL Mariner 2.0
Fixed versions2022.1-9, 0.22.0-1, 1.72.0-16, 1.75.0-28
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-33055
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34278
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productscbl2 mysql 8.0.45-3 on CBL Mariner 2.0, azl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34278
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34276
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34276
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-33056
Medium

tar-rs: unpack_in can chmod arbitrary directories by following symlinks

Mariner

Affected productsazl3 kata-containers-cc 3.15.0.aks0-7 on Azure Linux 3.0, azl3 rpm-ostree 2024.4-6 on Azure Linux 3.0, azl3 rust 1.90.0-4 on Azure Linux 3.0, azl3 kata-containers-cc 3.15.0.aks0-8 on Azure Linux 3.0
Fixed versions1.72.0-16, 1.75.0-28, 1.90.0-7, 1.5.2-2
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-33056
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34271
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34271
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34270
MediumCVSS 6.5

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34270
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-34267
MediumCVSS 4.9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 mysql 8.0.45-3 on CBL Mariner 2.0, cbl2 mysql 8.0.45-3 on CBL-Mariner 2.0
Fixed versions8.0.46-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-34267
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-3219
Medium

pip doesn't reject concatenated ZIP and tar archives

Mariner

Affected productsazl3 python-pip 24.2-6 on Azure Linux 3.0, azl3 python-virtualenv 20.36.1-2 on Azure Linux 3.0, cbl2 python-virtualenv 20.26.6-3 on CBL Mariner 2.0, azl3 python-virtualenv 20.36.1-4 on Azure Linux 3.0
Fixed versions24.2-7, 20.36.1-3, 20.36.1-4, 24.2-8
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-3219
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-4424
HighCVSS 7.5

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

Mariner

Affected productscbl2 libarchive 3.6.1-8 on CBL Mariner 2.0, cbl2 libarchive 3.6.1-9 on CBL Mariner 2.0, azl3 libarchive 3.7.7-5 on Azure Linux 3.0, azl3 libarchive 3.7.7-4 on Azure Linux 3.0
Fixed versions3.6.1-10, 3.7.7-6
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-4424
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-4426
MediumCVSS 6.5

Libarchive: libarchive: denial of service via malformed iso file processing

Mariner

Affected productsazl3 libarchive 3.7.7-4 on Azure Linux 3.0, cbl2 libarchive 3.6.1-8 on CBL Mariner 2.0, cbl2 libarchive 3.6.1-9 on CBL Mariner 2.0, azl3 libarchive 3.7.7-5 on Azure Linux 3.0
Fixed versions3.6.1-10, 3.7.7-6
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-4426
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-6409
High

Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input

Mariner

Affected productsazl3 mysql 8.0.45-2 on Azure Linux 3.0, cbl2 protobuf 3.17.3-5 on CBL Mariner 2.0, azl3 pytorch 2.2.2-12 on Azure Linux 3.0, azl3 protobuf 25.3-6 on Azure Linux 3.0
Fixed versions25.3-7
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-6409
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources