Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,914Advisories collected
6,332Published or updated in 30 days
7,001Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,914 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Delinea Security AdvisoriesCVE-2026-19117
CriticalCVSS 9.8

Delinea Secret Server on-prem FIDO2 credential registration authentication bypass vulnerability - CVE-2026-19117

Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only.

Affected productsDelinea Secret Server on-prem 10.6.0 through 11.7.61 11.8.0 through 11.8.1 11.9.0 through 11.9.47 12.0.0 through 12.0.22 12.1.0 through 12.1.2 Resolution:Upgrade to secret server version 12.2.7 or later, or upgrade to one of the following hotfixes: 12.1.3, 12.0.23, 11.9.48, 11.8.2, or 11.7.62.Customers on versions prior to 11.7 should upgrade to a supported version to address this vulnerability
Fixed versionsUpgrade to secret server version 12.2.7 or later, or upgrade to one of the following hotfixes: 12.1.3, 12.0.23, 11.9.48, 11.8.2, or 11.7.62.Customers on versions prior to 11.7 should upgrade to a supported version to address this vulnerability
Vendor guidance

Upgrade to secret server version 12.2.7 or later, or upgrade to one of the following hotfixes: 12.1.3, 12.0.23, 11.9.48, 11.8.2, or 11.7.62.Customers on versions prior to 11.7 should upgrade to a supported version to ...

CVE-2026-19117
Read the vendor advisory
Ubuntu Security NoticesUSN-8711-1
Severity not listed

USN-8711-1: Libgcrypt vulnerability

It was discovered that Libgcrypt had a timing-based side-channel flaw in its RSA implementation. A remote attacker could possibly use this issue to obtain sensitive information.

Read the vendor advisory
Ubuntu Security NoticesUSN-8688-2
Severity not listed

USN-8688-2: PAM vulnerability

USN-8688-1 fixed a vulnerability in PAM. This update provides the corresponding fix for PAM on Ubuntu 26.04 LTS. Original advisory details: Juthawong Naisanguansee discovered that PAM incorrectly cleared failed login attempt records when certain services invoked the account ph...

Vendor guidance

USN-8688-1 fixed a vulnerability in PAM.

Read the vendor advisory
Ubuntu Security NoticesUSN-8555-2
Severity not listed

USN-8555-2: Ubuntu Advantage Tools (pro client) regression

USN-8555-1 fixed vulnerabilities in Ubuntu Advantage Tools. On Ubuntu 14.04 LTS only, it was discovered that some machines were unable to enable esm-infra-legacy due to a preemptive apt-helper check. This update fixes the problem. We apologize for the inconvenience. Original a...

Vendor guidance

USN-8555-1 fixed vulnerabilities in Ubuntu Advantage Tools.

CVE-2026-9494CVE-2026-11386CVE-2026-12391
Read the vendor advisory
Ubuntu Security NoticesUSN-8709-1
Severity not listed

USN-8709-1: ncurses vulnerability

It was discovered that ncurses incorrectly handled specially crafted terminfo database entries. A local attacker could possibly use this issue to cause applications using ncurses to crash, resulting in a denial of service.

Read the vendor advisory
Ubuntu Security NoticesUSN-8708-1
Severity not listed

USN-8708-1: sudo-rs vulnerability

It was discovered that sudo-rs incorrectly handled time-of-check vs time- of-use conditions in sudoedit. A local attacker with permission to edit specific files using sudoedit could use this issue to place files in arbitrary directories, and possibly escalate their privileges....

Read the vendor advisory
Ubuntu Security NoticesUSN-8690-1
Severity not listed

USN-8690-1: Pillow vulnerability

It was discovered that Pillow did not properly manage memory when processing certain image files. An attacker could possibly use this issue to cause a denial of service or read sensitive data.

Read the vendor advisory
SonicWall PSIRT AdvisoriesSNWLID-2026-0016
CriticalCVSS 10.0Priority signal

SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities

1) CVE-2026-83548 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vu...

Affected productsSMA1000 Models - 6210, 7210, 8200v: 12.4.3-03453 (platform-hotfix) and older versions. 12.5.0-02835 (platform-hotfix) and older versions.
Fixed versionsSMA1000 Models - 6210, 7210, 8200v: 12.4.3-03526 (platform-hotfix) and higher versions. 12.5.0-02952 (platform-hotfix) and higher versions.
Vendor guidance

Install the applicable fixed SonicWall release for your product and branch. SMA1000 Models - 6210, 7210, 8200v: 12.4.3-03526 (platform-hotfix) and higher versions. 12.5.0-02952 (platform-hotfix) and higher versions.

CVE-2026-83548CVE-2026-83549
Read the vendor advisory
Ubuntu Security NoticesUSN-8705-2
Severity not listed

USN-8705-2: OpenZFS vulnerability

USN-8705-1 fixed vulnerabilities in OpenZFS. This update provides the corresponding fix for OpenZFS on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that OpenZFS incorrectly handled authorization checks for certain ioctl operations on Linu...

Vendor guidance

USN-8705-1 fixed vulnerabilities in OpenZFS.

Read the vendor advisory
Ubuntu Security NoticesUSN-8706-1
Severity not listed

USN-8706-1: zlib vulnerability

It was discovered that zlib incorrectly handled negative length parameters in CRC32 combine functions. An attacker could use this issue to cause a denial of service via excessive CPU consumption.

Read the vendor advisory
SonicWall PSIRT AdvisoriesSNWLID-2026-0013
HighCVSS 8.8

SonicWall NetExtender Linux Client Multiple Vulnerabilities

1) CVE-2026-66152 - SonicWall NetExtender arbitrary file write via path traversal vulnerability A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root. CVSS Score: 8.8 CVSS Vector: CV...

Affected productsNetExtender Linux Client: Version 10.3.5 and earlier versions
Fixed versionsNetExtender Linux Client: Version 10.3.6 and higher versions
Vendor guidance

Install the applicable fixed SonicWall release for your product and branch. NetExtender Linux Client: Version 10.3.6 and higher versions

CVE-2026-66152CVE-2026-66153
Read the vendor advisory Watch this product
Ubuntu Security NoticesUSN-8705-1
Severity not listed

USN-8705-1: OpenZFS vulnerability

It was discovered that OpenZFS incorrectly handled authorization checks for certain ioctl operations on Linux. A local attacker could possibly use this issue to perform pool-administrative operations or access privileged information, resulting in an authorization bypass.

Read the vendor advisory
Ubuntu Security NoticesUSN-8703-1
Severity not listed

USN-8703-1: WebKitGTK vulnerabilities

Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of ...

Read the vendor advisory
Ubuntu Security NoticesUSN-8702-1
Severity not listed

USN-8702-1: util-linux vulnerabilities

It was discovered that libblkid in util-linux had a heap use-after-free vulnerability during nested partition probing. An attacker who could present a crafted block device image could possibly use this issue to obtain sensitive information or cause a denial of service. (CVE-20...

CVE-2026-13595CVE-2026-27456CVE-2026-3184CVE-2026-53612CVE-2026-53613CVE-2026-53614
Read the vendor advisory
Ubuntu Security NoticesUSN-8701-1
Severity not listed

USN-8701-1: UDisks vulnerability

It was discovered that UDisks did not correctly validate the caller identity when handling the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. A local attacker with an active console session could possibly use this issue to mount filesystems on b...

Read the vendor advisory
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources