Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,986Advisories collected
6,818Published or updated in 30 days
8,727Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,986 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2026-39833
HighCVSS 9.1

Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

Mariner

Affected productsazl3 docker-buildx 0.14.0-11 on Azure Linux 3.0, azl3 docker-compose 2.27.0-9 on Azure Linux 3.0, azl3 packer 1.9.5-13 on Azure Linux 3.0, azl3 telegraf 1.31.0-19 on Azure Linux 3.0
Fixed versions0.14.0-15, 2.27.0-13, 1.9.5-16, 1.31.0-23
Vendor guidance

CBL-Mariner Releases

CVE-2026-39833
Read the vendor advisory Watch this product
Palo Alto Networks Security AdvisoriesCVE-2026-0266
MediumCVSS 4.8

CVE-2026-0266: PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Pano...

Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.1
Fixed versionsCloud NGFW All, PAN-OS 12.1 >= 12.1.5, PAN-OS 11.2 >= 11.2.11, PAN-OS 11.1 >= 11.1.14
Vendor guidance

VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.1 12.1.2 through 12.1.4 Upgrade to 12.1.5 or later. PAN-OS 11.2 11.2.0 through 11.2.10 Upgrade to 11.2.11 or later. PAN-OS 11.1 11.1.0 th...

CVE-2026-0266
Read the vendor advisory Watch this product
Palo Alto Networks Security AdvisoriesPAN-SA-2026-0009
InformationalCVSS 0.0

PAN-SA-2026-0009: Informational Bulletin: Impact assessment of OSS CVEs in Prisma SD-WAN ION

The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to Prisma SD-WAN ION. While Prisma SD-WAN ION may include the affected OSS package, Prisma SD-WAN ION does not offer any scenarios required for an ...

Affected productsPrisma SD-WAN ION
Fixed versionsPrisma SD-WAN ION All
Vendor guidance

No software updates are required at this time.

Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-20846
HighCVSS 7.5

GDI+ Denial of Service Vulnerability

Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.

Affected productsWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems
Fixed versions10.0.28000.1575, 10.0.17763.8389, 10.0.20348.4773, 10.0.20348.4711
Vendor guidance

Release Notes Install KB5077179. Install KB5075904. Install KB5075906. Install KB5075943. Install KB5075912. Install KB5075899. Install KB5075942. Install KB5077181. Install KB5077212. Install KB5075941. Install KB507...

CVE-2026-20846
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-47298
HighCVSS 8.0

Microsoft SharePoint Server Remote Code Execution Vulnerability

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Fixed versions16.0.5556.1005, 16.0.10417.20153, 16.0.19725.20384
Vendor guidance

Install KB5002880. Install KB5002874. Install KB5002873.

CVE-2026-47298
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2026-45482
HighCVSS 8.4

Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Affected productsMicrosoft Visual Studio Code CoPilot Chat Extension
Fixed versions1.123.2
Vendor guidance

Release Notes

CVE-2026-45482
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources