Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,541Advisories collected
6,562Published or updated in 30 days
8,317Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,541 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Citrix Security BulletinsCTX696604
HighCVSS 8.8

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474

NetScaler ADC and NetScaler Gateway are affected by the vulnerabilities mentioned below:

Affected productsNetScaler ADC and NetScaler Gateway, The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the vulnerabilities: NetScaler ADC and NetScaler Gateway 14.1 BEFORE 14.1-72.61 NetScaler ADC and NetScaler Gateway 13.1 BEFORE 13.1-63.18 NetScaler ADC FIPS BEFORE 14.1-72.61 FIPS NetScaler ADC FIPS and NDcPP BEFORE 13.1-37.272 Note: Secure Private Access Hybrid deployments using NetScaler instances are also affected by the vulnerabilities. Customers need to upgrade these NetScaler instances to the recommended NetScaler builds to address the vulnerabilities. This bulletin only applies to customer-managed NetScaler ADC and NetScaler Gateway. Cloud Software Group upgrades the Citrix-managed cloud services and Citrix-managed Adaptive Authentication with the necessary software updates.
Fixed versionsNetScaler ADC and NetScaler Gateway 14.1-72.61 and later releases, NetScaler ADC and NetScaler Gateway 13.1-63.18 and later releases of 13.1, NetScaler ADC 14.1-FIPS 14.1-72.61 FIPS and later releases of 14.1-FIPS, NetScaler ADC 13.1-FIPS and 13.1-NDcPP 13.1.37.272 and later releases of 13.1-FIPS and 13.1-NDcPP
Vendor guidance

Cloud Software Group strongly urges affected customers of NetScaler ADC and NetScaler Gateway to install the relevant updated versions as soon as possible. NetScaler ADC and NetScaler Gateway 14.1-72.61 and later rele...

CVE-2026-8451CVE-2026-8452CVE-2026-8655CVE-2026-10816CVE-2026-10817CVE-2026-13474
Read the vendor advisory Watch this product
Citrix Security BulletinsCTX693420
CriticalCVSS 9.3

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-5349 and CVE-2025-5777

NetScaler ADC and NetScaler Gateway contain the vulnerabilities mentioned below:

Affected productsNetScaler ADC and NetScaler Gateway, The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the vulnerabilities: NetScaler ADC and NetScaler Gateway 14.1 BEFORE 14.1-43.56 NetScaler ADC and NetScaler Gateway 13.1 BEFORE 13.1-58.32 NetScaler ADC 13.1-FIPS and NDcPP BEFORE 13.1-37.235-FIPS and NDcPP NetScaler ADC 12.1-FIPS BEFORE 12.1-55.328-FIPS Note: NetScaler ADC and NetScaler Gateway versions 12.1 and 13.0 are now End Of Life (EOL) and are vulnerable. Customers are recommended to upgrade their appliances to one of the supported versions that address the vulnerabilities.
Fixed versionsNetScaler ADC and NetScaler Gateway 14.1-43.56 and later releases, NetScaler ADC and NetScaler Gateway 13.1-58.32 and later releases of 13.1, NetScaler ADC 13.1-FIPS and 13.1-NDcPP 13.1-37.235 and later releases of 13.1-FIPS and 13.1-NDcPP, NetScaler ADC 12.1-FIPS 12.1-55.328 and later releases of 12.1-FIPS
Vendor guidance

Cloud Software Group strongly urges affected customers of NetScaler ADC and NetScaler Gateway to install the relevant updated versions as soon as possible. NetScaler ADC and NetScaler Gateway 14.1-43.56 and later rele...

CVE-2025-5349CVE-2025-5777
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-35248
HighCVSS 7.3

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), integrity (I:L) and availability (A:L). What does that mean for this vulnerability? While we cannot rule out the impact to Confidentiality, Integrity,...

Affected productsMicrosoft Dynamics 365 Business Central 2023 Release Wave 1, Microsoft Dynamics 365 Business Central 2023 Release Wave 2, Microsoft Dynamics 365 Business Central 2024 Release Wave 1
Fixed versions23.0.18933, 24.0.19487
Vendor guidance

Install KB5038529. Install KB5038530. Install KB5038531.

CVE-2024-35248
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-50650
HighCVSS 7.8

.NET Framework Elevation of Privilege Vulnerability

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.

Affected productsMicrosoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation), Microsoft .NET Framework 4.8 on Windows Server 2012 R2, Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)
Fixed versions4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Vendor guidance

Release Notes Install KB5101009. Install KB5101011. Install KB5101007. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB5099535. Install KB5100990. Install KB5100991. Install KB510...

CVE-2026-50650
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-50648
HighCVSS 7.5

.NET Framework Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.

Affected products.NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Linux, .NET 8.0 runtime installed on Windows
Fixed versions8.0.29, 10.0.10, 9.0.18, 17.12.22
Vendor guidance

Release Notes Install KB5104032. Install KB5104034. Install KB5104033. Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB509...

CVE-2026-50648
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-50646
HighCVSS 7.8

.NET Framework Remote Code Execution Vulnerability

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

Affected productsMicrosoft .NET Framework 4.8 on Windows Server 2012, Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation), Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems
Fixed versions4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0, 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0
Vendor guidance

Release Notes Install KB5101009. Install KB5101007. Install KB5101008. Install KB5101006. Install KB5099535. Install KB5100991. Install KB5100990. Install KB5101000. Install KB5101004. Install KB5101001. Install KB510...

CVE-2026-50646
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-50527
HighCVSS 7.5

.NET Framework Denial of Service Vulnerability

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

Affected productsMicrosoft .NET Framework 4.8 on Windows Server 2016, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)
Fixed versions4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0, 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0
Vendor guidance

Release Notes Install KB5101007. Install KB5101009. Install KB5101011. Install KB5101008. Install KB5101010. Install KB5101006. Install KB5100989. Install KB5099535. Install KB5100990. Install KB5100991. Install KB510...

CVE-2026-50527
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-47302
HighCVSS 7.5

.NET Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

Affected products.NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Windows, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Linux
Fixed versions10.0.10, 8.0.29, 4.8.4803.0, 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0
Vendor guidance

Release Notes Install KB5104034. Install KB5104032. Install KB5101007. Install KB5101011. Install KB5101008. Install KB5101009. Install KB5101010. Install KB5101006. Install KB5100989. Install KB5099535. Install KB510...

CVE-2026-47302
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources