CurrentChecked 15 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
16,884Advisories collected
6,314Published or updated in 30 days
6,999Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 3 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 24 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 5 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 4 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 4 hours ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked 9 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 4 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 9 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
16,884 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Cisco Security Advisoriescisco-sa-ise-cmd-inj-e2CuZCYZ
Critical
Cisco Identity Services Engine Command Injection Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to perform command injection attacks on an affected device and execute arbitrary commands as the root user. To expl...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Cisco Security Advisoriescisco-sa-fmc-sftunn-codex-c3O4Jft2
Critical
Cisco Secure Firewall Management Center Software sftunnel Root Arbitrary Code Execution Vulnerability
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This vulnerability exists because a registered sftunnel peer has i...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-ISE-ABP-VNSW7Tn5
Critical
Cisco Identity Services Engine Authentication Bypass Vulnerability
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by send...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-fmc-javarce-y2NypXwk
Critical
Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization ...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-ise-sql-inj-3QTKR947
High
Cisco Identity Services Engine SQL Injection Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow a remote attacker to conduct SQL injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software update...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Cisco Security Advisoriescisco-sa-fmcftd-sftun-multivulns-WGVHOrN3
High
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Vulnerabilities
Multiple vulnerabilities in Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated attacker to perform an sftunnel authentication bypass or sftunnel denial of service (DoS) attack. For more ...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Cisco Security Advisoriescisco-sa-ftd-tls1.3-dos-dLxwFWgF
High
Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability
A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due ...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-ise-RADIUS-dos-wR3hYPMw
High
Cisco Identity Services Engine RADIUS Denial of Service Vulnerability
A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attac...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-ise-multisql-inject-JnHK54Rq
Medium
Cisco Identity Services Engine SQL and HQL Injection Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct SQL or HQL injection attacks on an affected device. These vulnerabilities are due to insufficient valida...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Cisco Security Advisoriescisco-sa-ise-multi-traversal-WDTgYCdn
Medium
Cisco Identity Services Engine Multiple Path Traversal Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to conduct path traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section ...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Cisco Security Advisoriescisco-sa-ise-auth-bypass-1-MxcTNgwx
Medium
Cisco Identity Services Engine Authorization Bypass Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. These vulnerabili...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Cisco Security Advisoriescisco-sa-ise-multi-vuln-kWLeNnRD
Medium
Cisco Identity Services Engine 802.1X Session Hijack and Information Disclosure Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an unauthenticated, local attacker to either conduct an authentication bypass or disclose sensitive information. For more information about these vulnerabilities, see the Details section of this advis...
Vendor guidance
Cisco has released software updates that address these vulnerabilities.
Cisco Security Advisoriescisco-sa-ise-inf-disc-LFWvcCu
Medium
Cisco Identity Services Engine Information Disclosure Vulnerability
A vulnerability in the API of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to view sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is d...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-auth-bypass-broadwor-57m9dmm5
Medium
Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. ...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-ise-xss-Uz9VWRQ
Medium
Cisco Identity Services Engine Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-bas...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-ftd-snort2-ssldos-Mw7WYX9c
Medium
Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability
A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 2 Detection Engine to restart. This vulnerability is due to incomplete valid...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Cisco Security Advisoriescisco-sa-teva-os-command-W4GAO6jp
Medium
Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability
A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based m...
Vendor guidance
Cisco has released software updates that address this vulnerability.
Ubuntu Security NoticesUSN-8736-2
Severity not listed
USN-8736-2: Perl vulnerabilities
USN-8736-1 fixed vulnerabilities in Perl. This update provides the corresponding fix for Perl on Ubuntu 24.04 LTS. Original advisory details: It was discovered that Perl incorrectly handled certain large inputs during regular expression matching. An attacker could possibly use...
Vendor guidance
USN-8736-1 fixed vulnerabilities in Perl.
Ubuntu Security NoticesUSN-8773-1
Severity not listed
USN-8773-1: GNU Guix vulnerability
It was discovered that GNU Guix incorrectly made build outputs accessible to local users before their file metadata was finalized. A local attacker could possibly use this issue to gain elevated privileges.
Ubuntu Security NoticesUSN-8772-1
Severity not listed
USN-8772-1: AOM vulnerabilities
It was discovered that AOM incorrectly handled the first-pass statistics buffer in Look-Ahead Processing (LAP) mode. An attacker could possibly use this issue to cause a heap buffer overflow, leading to a denial of service or possibly execute arbitrary code. (CVE-2026-56208) I...
Ubuntu Security NoticesUSN-8514-2
Severity not listed
USN-8514-2: OpenSSH vulnerability
USN-8514-1 fixed a vulnerability in OpenSSH. This update provides the corresponding fix for Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that OpenSSH incorrectly handled file permissions when downloading files as root u...
Vendor guidance
USN-8514-1 fixed a vulnerability in OpenSSH.
Microsoft Security Response CenterCVE-2026-85880
HighCVSS 7.8
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
Affected productsWindows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation)
Fixed versions10.0.17763.9245, 10.0.20348.5622, 10.0.19044.7725, 10.0.19045.7725
Vendor guidance
Install KB5122876. Install KB5122882. Install KB5122878. Install KB5123099. Install KB5123065. Install KB5123066.
Ubuntu Security NoticesUSN-8771-1
Severity not listed
USN-8771-1: Valkey vulnerabilities
Madelyn Olson discovered that Valkey incorrectly handled TLS connections under certain conditions. A remote attacker could possibly use this issue to cause Valkey to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-56684) It was discovered that Val...
Microsoft Security Response CenterCVE-2023-52676
MediumCVSS 5.5
bpf: Guard stack limits against 32bit overflow
Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...
Affected productscbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1, cbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
Vendor guidance
See the Microsoft Security Update Guide for the update that applies to your product.
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.