CurrentChecked 3 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 57 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 58 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 57 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 3 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 57 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 18 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-39823
MediumCVSS 6.1
Bypass of meta content URL escaping causes XSS in html/template
Mariner
Affected productsazl3 golang 1.25.9-1 on Azure Linux 3.0, azl3 golang 1.26.2-1 on Azure Linux 3.0, azl3 golang 1.27.0-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2025-58183
MediumCVSS 6.6
Unbounded allocation when parsing GNU sparse map in archive/tar
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 cri-o 1.22.3-16 on CBL Mariner 2.0, azl3 containerized-data-importer 1.57.0-16 on Azure Linux 3.0, cbl2 msft-golang 1.24.8-1 on CBL Mariner 2.0, cbl2 skopeo 1.14.2-12 on CBL Mariner 2.0
Fixed versions1.22.3-17, 1.57.0-17, 1.14.2-13, 2.62.0-10
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2025-68119
HighCVSS 7.0
Unexpected code execution when invoking toolchain in cmd/go
Mariner
Affected productsazl3 golang 1.27.0-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2025-58187
HighCVSS 7.5
Quadratic complexity when checking name constraints in crypto/x509
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productsazl3 golang 1.25.5-1 on Azure Linux 3.0, cbl2 golang 1.18.8-10 on CBL Mariner 2.0, cbl2 golang 1.22.7-5 on CBL Mariner 2.0, cbl2 msft-golang 1.24.8-1 on CBL Mariner 2.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2023-24540
CriticalCVSS 9.8
Improper handling of JavaScript whitespace in html/template
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 golang 1.18.8-7 on CBL Mariner 2.0, cbl2 golang 1.17.13-2 on CBL Mariner 2.0, cbl2 golang 1.21.6-1 on CBL Mariner 2.0, cbl2 msft-golang 1.20.11-1 on CBL Mariner 2.0
Fixed versions1.21.6-1, 1.20.11-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-89809
MediumCVSS 5.5
drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds
Mariner
Affected productsazl3 kernel 6.6.150.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-87776
HighCVSS 7.5
compression vulnerable to Denial of Service via memory leak on premature response close
Mariner
Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-27903
HighCVSS 7.5
minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
Mariner
Affected productsazl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Microsoft Security Response CenterCVE-2026-89161
HighCVSS 7.4
In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.
Mariner
Affected productsazl3 rust 1.75.0-31 on Azure Linux 3.0, azl3 php 8.3.33-1 on Azure Linux 3.0, azl3 qtbase 6.6.3-5 on Azure Linux 3.0, azl3 rust 1.96.1-1 on Azure Linux 3.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
AWS Security BulletinsCVE-2026-86831
Severity not listed
CVE-2026-86831: Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS
Bulletin ID: 2026-113-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/16/2026 12:30 PM PDT Description: Network Policy Agent is an EKS Policy management feature. We identified CVE-2026-86831, a cross-namespace NetworkPolicy bypass in Amazon EKS...
Ubuntu Security NoticesUSN-8776-1
Severity not listed
USN-8776-1: python-cryptography vulnerabilities
It was discovered that python-cryptography incorrectly accepted objects with immutable buffers when performing certain cipher operations. This would result in corrupted output, contrary to expectations. This issue only affected Ubuntu 18.04 LTS. (CVE-2023-23931) It was discove...
Ubuntu Security NoticesUSN-8775-1
Severity not listed
USN-8775-1: SQLite vulnerability
It was discovered that SQLite was vulnerable to a buffer overflow in the sqlar extension. If a user were tricked into opening a specially crafted SQLar archive, an attacker could cause a denial of service.
Ubuntu Security NoticesUSN-8774-1
Severity not listed
USN-8774-1: libheif vulnerabilities
Ali Firas discovered that libheif incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-62291) Dmitrijs Trizna discovered that libheif incorrectly handled certain image sequences. An atta...
Cisco Security Advisoriescisco-sa-notice-jfxK98ZP
Informational
Cisco Advance Notification for Publication of September 16, 2026, Security Advisories
On September 16, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the advisories that are listed in the following tables.
Affected productsCisco Identity Services Engine, Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software, Cisco Nexus Dashboard, BroadWorks, and ThousandEyes Virtual Appliance
Vendor guidance
To remediate these vulnerabilities, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories.
Cisco Security Advisoriescisco-sa-fmc-static-cred-BET3Cjh
High
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerabilit...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-asaftd-vpn-dos-dzv4mQFF
High
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulti...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-onprem-fmc-authbypass-5JPp45V2
Critical
Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-hardening-ndw1-psFvnrg
CriticalPriority signal
Cisco Nexus Dashboard Software Security Hardening Release: September 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered v...
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
Cisco Security Advisoriescisco-sa-hardening-ise-XU5EwX5T
CriticalPriority signal
Cisco Identity Services Engine Hardening Release: September 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in softw...
Vendor guidance
To assist customers in patching and streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulnerab...
Cisco Security Advisoriescisco-sa-ise-multi-hrP9jQSQ
Critical
Cisco Identity Services Engine Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to bypass authentication to the REST API, achieve remote code execution, perform SQL injection, and conduct XML External Entity inj...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Cisco Security Advisoriescisco-sa-fmc-mulivulns-4PsnFwvx
Critical
Cisco Secure Firewall Management Center Software Vulnerabilities
Multiple vulnerabilities in Cisco Secure Firewall Management Center (FMC) Software could allow a remote attacker to gain root access, download sensitive files, perform a SQL injection attack, or cause a denial of service (DoS) condition. For more information about these vulner...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Cisco Security Advisoriescisco-sa-fmc2-multivulns-HXgcqRG
Critical
Cisco Secure Firewall Management Center Software Vulnerabilities
Multiple vulnerabilities in Cisco Secure Firewall Management Center (FMC) Software could allow a remote attacker to gain root access and perform session forgery or session impersonation. For more information about these vulnerabilities, see the Details section of this advisory...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Cisco Security Advisoriescisco-sa-ise-mult-vul-ymSsTLCc
Critical
Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct SQL injections, modify data, or execute arbitrary commands on the underlying operating system on an affected device. For more information about these vulne...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Cisco Security Advisoriescisco-sa-ise-rce-se7bYU57
Critical
Cisco Identity Services Engine Remote Code Execution Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit these vulnerabilities, the attacker must have valid administrative ...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.