Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,884 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-78135
MediumCVSS 5.6

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.

Mariner

Affected productsazl3 strongswan 5.9.14-10 on Azure Linux 3.0
Fixed versions5.9.14-11
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-78135
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-78134
HighCVSS 7.1

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity.

Mariner

Affected productsazl3 strongswan 5.9.14-10 on Azure Linux 3.0
Fixed versions5.9.14-11
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-78134
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-78124
LowCVSS 3.7

strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.

Mariner

Affected productsazl3 strongswan 5.9.14-10 on Azure Linux 3.0
Fixed versions5.9.14-11
Vendor guidance

See the Microsoft Security Update Guide for the update that applies to your product.

CVE-2026-78124
Read the vendor advisory Watch this product
Cisco Security Advisoriescisco-sa-asa-ftd-logging-dos-ZXXNesfN
High

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability

A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilizati...

Vendor guidance

Cisco has released software updates that address this vulnerability.

CVE-2026-20154
Read the vendor advisory
Cisco Security Advisoriescisco-sa-hardening-asaftdfmc-uvpPROhN
CriticalPriority signal

Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software and Cisco Secure Firewall Management Center (FMC) Software engineering tea...

Affected productsSecure Firewall ASA Software, Secure FTD Software, Secure FMC Software
Vendor guidance

To assist customers in patching and to streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulne...

CVE-2026-20329CVE-2026-20330CVE-2026-20331CVE-2026-20332CVE-2026-20333CVE-2026-20334
Read the vendor advisory Watch this product
Cisco Security Advisoriescisco-sa-asaftd-dtls-dos-Kp57HkyO
High

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability

A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software for Cisco Secure Firewall 3100 Series and 4200 Series devices could allow an unauthenticated, rem...

Vendor guidance

Cisco has released software updates that address this vulnerability.

CVE-2026-20250
Read the vendor advisory
Cisco Security Advisoriescisco-sa-asaftd-ikev2cert-dos-uWyc2xtv
High

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability

A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv2) for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker t...

Vendor guidance

Cisco has released software updates that address this vulnerability.

CVE-2026-20249
Read the vendor advisory
Cisco Security Advisoriescisco-sa-ftd-acl-bypass-8p6vFvw
Medium

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Object Group Access Control List Bypass Vulnerabilities

Multiple vulnerabilities in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to byp...

Vendor guidance

Cisco has released software updates that address these vulnerabilities.

CVE-2026-20120CVE-2026-20121
Read the vendor advisory
Cisco Security Advisoriescisco-sa-asaftd-tcpdns-dos-p6dUnjr5
Medium

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability

A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly ...

Vendor guidance

Cisco has released software updates that address this vulnerability.

CVE-2026-20248
Read the vendor advisory
Cisco Security Advisoriescisco-sa-asaftd-eigrp-dos-GOhNejSj
High

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a ...

Vendor guidance

This vulnerability is due to improper resource management when handling EIGRP update messages.

CVE-2026-20222
Read the vendor advisory
Ubuntu Security NoticesUSN-8782-1
Severity not listed

USN-8782-1: Rclone vulnerability

It was discovered that Rclone incorrectly handled unauthenticated requests to the remote control API. An attacker could possibly use this issue to execute arbitrary commands as the user invoking rclone. (CVE-2026-49980)

CVE-2026-49980
Read the vendor advisory
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources