CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
Security advisories from the vendors you use.
Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.
11Vendor sources
18,986Advisories collected
6,820Published or updated in 30 days
8,727Marked critical or high
Coverage
Connected directly to official vendor sources
The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.
CurrentChecked 5 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
Check delayedChecked 30 days ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 5 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked 5 minutes ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked 10 minutes ago
Checked every 15 minutes
Browse this vendor's advisories
Official source
CurrentChecked about an hour ago
Checked every 6 hours
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
Check delayedChecked 3 days ago
Checked hourly
Browse this vendor's advisories
Official source
CurrentChecked just now
Checked every 15 minutes
Browse this vendor's advisories
Official source
18,986 advisories
Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Microsoft Security Response CenterCVE-2026-53354
HighCVSS 7.1
arm64: errata: Mitigate TLBI errata on various Arm CPUs
Mariner
Affected productsazl3 kernel 6.6.143.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-23278
MediumCVSS 5.5
netfilter: nf_tables: always walk all pending catchall elements
Mariner
Affected productsazl3 kernel 6.6.126.1-1 on Azure Linux 3.0, azl3 kernel 6.6.130.1-3 on Azure Linux 3.0, azl3 kernel 6.6.134.1-2 on Azure Linux 3.0, azl3 kernel 6.6.138.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-47241
Low
Net::IMAP: Denial of Service via incomplete raw argument validation
Mariner
Affected productsazl3 ruby 3.3.5-8 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-46140
MediumCVSS 5.5
Bluetooth: btmtk: validate WMT event SKB length before struct access
Mariner
Affected productsazl3 kernel 6.6.143.1-1 on Azure Linux 3.0
Microsoft Security Response CenterCVE-2026-46331
HighCVSS 8.1
net/sched: fix pedit partial COW leading to page cache corruption
Mariner
Affected productsazl3 kernel 6.6.139.1-1 on Azure Linux 3.0, azl3 kernel 6.6.141.1-1 on Azure Linux 3.0, azl3 kernel 6.6.143.1-1 on Azure Linux 3.0
Palo Alto Networks Security AdvisoriesCVE-2026-0279
MediumCVSS 5.3
CVE-2026-0279: PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malic...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.1
Fixed versionsCloud NGFW All, PAN-OS 12.1 >= 12.1.8, PAN-OS 11.2 >= 11.2.13, PAN-OS 11.1 >= 11.1.16
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.1 12.1.2 through 12.1.7-h* Upgrade to 12.1.8 or later. PAN-OS 11.2 11.2.0 through 11.2.12 Upgrade to 11.2.13 or later. PAN-OS 11.1 11.1.0...
Palo Alto Networks Security AdvisoriesPAN-SA-2026-0010
CriticalCVSS 9.2
PAN-SA-2026-0010: Chromium and Prisma Browser: Monthly Vulnerability Update (July 2026)
Palo Alto Networks incorporated the following Chromium security fixes into our products: * https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html
Affected productsPrisma Browser
Fixed versionsPrisma Browser >= 150.33.2.46
Vendor guidance
CVE PRISMA BROWSER CVE-2026-10881 149.10.3.53 CVE-2026-10882 149.10.3.53 CVE-2026-10883 149.10.3.53 CVE-2026-10884 149.10.3.53 CVE-2026-10885 149.10.3.53 CVE-2026-10886 149.10.3.53 CVE-2026-10887 149.10.3.53 CVE-2026-...
Palo Alto Networks Security AdvisoriesCVE-2026-0288
CriticalCVSS 9.2
CVE-2026-0288: PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sendi...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.1
Fixed versionsCloud NGFW All on AWS, All on Azure unless you have been contacted by Palo Alto Networks, PAN-OS 12.1 >= 12.1.4-h8, >= 12.1.7-h2, >= 12.1.8, PAN-OS 11.2 >= 11.2.4-h20, >= 11.2.7-h18, >= 11.2.10-h12, >= 11.2.13, PAN-OS 11.1 >= 11.1.4-h35, >= 11.1.6-h35, >= 11.1.7-h8, >= 11.1.10-h30, >= 11.1.13-h9, >= 11.1.16
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.1 12.1.5 through 12.1.7-h* Upgrade to 12.1.7-h2 or 12.1.8 or later. 12.1.2 through 12.1.4-h* Upgrade to 12.1.4-h8 or 12.1.8 or later. PAN...
Palo Alto Networks Security AdvisoriesCVE-2026-0287
HighCVSS 8.7
CVE-2026-0287: PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attem...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.1
Fixed versionsCloud NGFW None on AWS, None on Azure, PAN-OS 12.1 >= 12.1.4-h8, >= 12.1.7-h2, >= 12.1.8, PAN-OS 11.2 >= 11.2.4-h20, >= 11.2.7-h18, >= 11.2.10-h12, >= 11.2.13, PAN-OS 11.1 >= 11.1.4-h35, >= 11.1.6-h35, >= 11.1.7-h8, >= 11.1.10-h30, >= 11.1.13-h9, >= 11.1.16
Vendor guidance
VERSION MINOR VERSION RANGE SUGGESTED SOLUTION Cloud NGFW Customers who prefer to upgrade can work with Palo Alto Networks support to schedule an on-demand software upgrade. PAN-OS 12.1 12.1.5 through 12.1.7-h* Upgrad...
Palo Alto Networks Security AdvisoriesCVE-2026-0285
HighCVSS 7.0
CVE-2026-0285: PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface
A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The security risk posed by ...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.1
Fixed versionsCloud NGFW All, PAN-OS 12.1 >= 12.1.4-h8, >= 12.1.7-h2, >= 12.1.8, PAN-OS 11.2 >= 11.2.4-h20, >= 11.2.7-h18, >= 11.2.10-h11, >= 11.2.13, PAN-OS 11.1 >= 11.1.4-h35, >= 11.1.6-h35, >= 11.1.7-h8, >= 11.1.10-h30, >= 11.1.13-h9, >= 11.1.16
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.1 12.1.5 through 12.1.7-h* Upgrade to 12.1.7-h2 or 12.1.8 or later. 12.1.2 through 12.1.4-h* Upgrade to 12.1.4-h8 or 12.1.8 or later. PAN...
Palo Alto Networks Security AdvisoriesCVE-2026-0284
HighCVSS 7.8
CVE-2026-0284: PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inject malicious XML content, potentially leading to information disclosure or corruption of internal L...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.1
Fixed versionsCloud NGFW All, PAN-OS 12.1 >= 12.1.4-h8, >= 12.1.7-h2, >= 12.1.8, PAN-OS 11.2 >= 11.2.4-h20, >= 11.2.7-h18, >= 11.2.10-h12, >= 11.2.13, PAN-OS 11.1 >= 11.1.4-h35, >= 11.1.6-h35, >= 11.1.7-h8, >= 11.1.10-h30, >= 11.1.13-h9, >= 11.1.16
Vendor guidance
VERSION MINOR VERSION RANGE SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.1 12.1.5 through 12.1.7-h* Upgrade to 12.1.7-h2 or 12.1.8 or later. 12.1.2 through 12.1.4-h* Upgrade to 12.1.4-h8 or 12.1.8 or late...
Palo Alto Networks Security AdvisoriesCVE-2026-0283
HighCVSS 7.8
CVE-2026-0283: PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)
An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN connection. Panorama, Cloud NGFW, and Pr...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.1
Fixed versionsCloud NGFW All, PAN-OS 12.1 >= 12.1.4-h8, >= 12.1.7-h2, >= 12.1.8, PAN-OS 11.2 >= 11.2.4-h20, >= 11.2.7-h18, >= 11.2.10-h12, >= 11.2.13, PAN-OS 11.1 >= 11.1.4-h35, >= 11.1.6-h35, >= 11.1.7-h8, >= 11.1.10-h30, >= 11.1.13-h9, >= 11.1.16
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW All No action needed. PAN-OS 12.1 12.1.5 through 12.1.7-h* Upgrade to 12.1.7-h2 or 12.1.8 or later. 12.1.2 through 12.1.4-h* Upgrade to 12.1.4-h8 or 12.1.8 or later....
Palo Alto Networks Security AdvisoriesCVE-2026-0286
HighCVSS 8.5
CVE-2026-0286: PAN-OS: Authenticated Command Injection in CLI
A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root. The security risk posed by this issue is significantly minimized when CLI access is restricted to a...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.1
Fixed versionsCloud NGFW All, PAN-OS 12.1 >= 12.1.4-h8, >= 12.1.7-h2, >= 12.1.8, PAN-OS 11.2 >= 11.2.4-h20, >= 11.2.7-h18, >= 11.2.10-h11, >= 11.2.13, PAN-OS 11.1 >= 11.1.4-h35, >= 11.1.6-h35, >= 11.1.7-h8, >= 11.1.10-h30, >= 11.1.13-h9, >= 11.1.16
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW All No action needed. PAN-OS 12.1 12.1.5 through 12.1.7-h* Upgrade to 12.1.7-h2 or 12.1.8 or later. 12.1.2 through 12.1.4-h* Upgrade to 12.1.4-h8 or 12.1.8 or later....
Palo Alto Networks Security AdvisoriesCVE-2026-0278
HighCVSS 8.4
CVE-2026-0278: Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows
Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls. The Prisma Access Agent on macOS is not affected.
Affected productsPrisma Access Agent, Prisma Access Agent 0
Fixed versionsPrisma Access Agent 0 >= 26.2.1 on Windows, Prisma Access Agent All on macOS
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Prisma Access Agent on Windows 24.0 through 26.2 Upgrade to 26.2.1 or later. Prisma Access Agent on macOS No action needed.
Palo Alto Networks Security AdvisoriesCVE-2026-0281
MediumCVSS 5.9
CVE-2026-0281: PAN-OS: Information Disclosure Vulnerability in Management Web Interface
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to obtain web session tokens. This requires a legitimate user to first click on a malicious link provided by t...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.1
Fixed versionsCloud NGFW All, PAN-OS 12.1 >= 12.1.8, PAN-OS 11.2 >= 11.2.13, PAN-OS 11.1 >= 11.1.16
Vendor guidance
VERSION MINOR VERSION RANGE SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.1 12.1.2 through 12.1.7-h* Upgrade to 12.1.8 or later. PAN-OS 11.2 11.2.0 through 11.2.12 Upgrade to 11.2.13 or later. PAN-OS 11.1 ...
Palo Alto Networks Security AdvisoriesCVE-2026-0282
MediumCVSS 6.9
CVE-2026-0282: PAN-OS: File Deletion Vulnerability in Management Web Interface
A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from a temporary directory. The security risk posed by this issue is minimized by restricting access to ...
Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.1
Fixed versionsCloud NGFW All, PAN-OS 12.1 >= 12.1.8, PAN-OS 11.2 >= 11.2.13, PAN-OS 11.1 >= 11.1.16
Vendor guidance
VERSION MINOR VERSION RANGE SUGGESTED SOLUTION Cloud NGFW All No action needed. PAN-OS 12.1 12.1.0 through 12.1.7-h* Upgrade to 12.1.8 or later. PAN-OS 11.2 11.2.0 through 11.2.12 Upgrade to 11.2.13 or later. PAN-OS 1...
Palo Alto Networks Security AdvisoriesCVE-2026-0280
MediumCVSS 6.3
CVE-2026-0280: PAN-OS: IPv6 Firewall Policy Bypass
An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach protected services. Cloud NGFW and Panor...
Affected productsCloud NGFW, PAN-OS, Panorama, Prisma Access
Fixed versionsCloud NGFW All, PAN-OS 12.1 >= 12.1.4-h8, >= 12.1.7-h2, >= 12.1.8, PAN-OS 11.2 >= 11.2.4-h20, >= 11.2.7-h18, >= 11.2.10-h11, >= 11.2.13, PAN-OS 11.1 >= 11.1.4-h35, >= 11.1.6-h35, >= 11.1.7-h8, >= 11.1.10-h30, >= 11.1.13-h9, >= 11.1.16
Vendor guidance
VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.1 12.1.5 through 12.1.7-h* Upgrade to 12.1.7-h2 or 12.1.8 or later. 12.1.2 through 12.1.4-h* Upgrade to 12.1.4-h8 or 12.1.8 or later. PAN...
Microsoft Security Response CenterCVE-2026-53362
HighCVSS 7.3
ipv6: account for fraggap on the paged allocation path
Mariner
Affected productsazl3 kernel 6.6.143.1-1 on Azure Linux 3.0
Fixed versions6.6.144.1-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-53361
MediumCVSS 4.5
af_unix: Set gc_in_progress to true in unix_gc().
Mariner
Affected productsazl3 kernel 6.6.143.1-1 on Azure Linux 3.0
Fixed versions6.6.144.1-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-53325
MediumCVSS 5.5
agp/amd64: Fix broken error propagation in agp_amd64_probe()
Mariner
Affected productsazl3 kernel 6.6.143.1-1 on Azure Linux 3.0
Fixed versions6.6.144.1-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-52909
HighCVSS 7.8
ip6_vti: set netns_immutable on the fallback device.
Mariner
Affected productsazl3 kernel 6.6.143.1-1 on Azure Linux 3.0
Fixed versions6.6.144.1-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-53163
MediumCVSS 5.5
locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
Mariner
Affected productsazl3 kernel 6.6.143.1-1 on Azure Linux 3.0, azl3 kernel 6.6.141.1-1 on Azure Linux 3.0
Fixed versions6.6.144.1-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-53138
MediumCVSS 5.5
drm/amd/display: Bound VBIOS record-chain walk loops
Mariner
Affected productsazl3 kernel 6.6.141.1-1 on Azure Linux 3.0, azl3 kernel 6.6.143.1-1 on Azure Linux 3.0
Fixed versions6.6.144.1-1
Vendor guidance
CBL-Mariner Releases
Microsoft Security Response CenterCVE-2026-53157
MediumCVSS 5.5
net: phonet: free phonet_device after RCU grace period
Mariner
Affected productsazl3 kernel 6.6.143.1-1 on Azure Linux 3.0
Fixed versions6.6.144.1-1
Vendor guidance
CBL-Mariner Releases
Before you act
Start with the vendor's bulletin.
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.