Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

11Vendor sources
18,533Advisories collected
6,565Published or updated in 30 days
8,314Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,533 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Cisco Security Advisoriescisco-sa-sdwan-infodis-SPuJBDCe
Medium

Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to insufficient access control enforcement for spec...

Vendor guidance

Cisco has released software updates that address this vulnerability.

Microsoft Security Response CenterCVE-2026-50659
HighCVSS 6.5

.NET Spoofing Vulnerability

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

Affected productsMicrosoft Visual Studio 2022 version 17.12, .NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows
Fixed versions17.12.22, 10.0.10, 8.0.29, 9.0.18
Vendor guidance

Release Notes Install KB5104034. Install KB5104032. Install KB5104033. Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB509...

Microsoft Security Response CenterCVE-2026-47303
HighCVSS 8.8

ASP.NET Core Elevation of Privilege Vulnerability

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Affected products.NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows, .NET 8.0 runtime installed on Linux
Fixed versions10.0.10, 8.0.29, 9.0.18, 17.12.22
Vendor guidance

Release Notes Install KB5104034. Install KB5104032. Install KB5104033.

Microsoft Security Response CenterCVE-2026-44839
MediumCVSS 4.8

RabbitMQ: Unsanitized vhost names allow for XSS in management UI

Mariner

Affected productsazl3 rabbitmq-server 3.13.7-6 on Azure Linux 3.0, azl3 rabbitmq-server 3.13.7-8 on Azure Linux 3.0, azl3 rabbitmq-server 3.13.7-3 on Azure Linux 3.0, azl3 rabbitmq-server 3.13.7-5 on Azure Linux 3.0
Fixed versions3.13.7-7, 3.13.7-8
Vendor guidance

CBL-Mariner Releases

Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources