Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
16,655Advisories collected
5,930Published or updated in 30 days
6,934Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

16,655 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Cisco Security Advisoriescisco-sa-snort3-mime-vulns-bkXjcKkt
Medium

Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart. This vulnerability is due to a lack of error checking when the MIME fields of the SMT...

Affected products1000 Series Integrated Services Routers (ISRs), 4000 Series ISRs, 8100 Series Secure Routers, 8200 Series Secure Routers
Vendor guidance

Cisco has released software updates that address this vulnerability.

CVE-2026-20011
Read the vendor advisory Watch this product
Cisco Security Advisoriescisco-sa-hardening-snort3-ybgmhTQe
CriticalPriority signal

Multiple Cisco Products Snort 3 Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple inte...

Affected productsCisco Cloud-delivered Firewall (CDFW), Cisco Cyber Vision, Cisco Meraki MX Security Appliances, Cisco Secure Access (CSA)
Vendor guidance

To assist customers in patching and to streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class - Common Weakness Enumeration (CWE) - and assigned a single Common Vulne...

CVE-2026-20043CVE-2026-20236CVE-2026-20291CVE-2026-20356
Read the vendor advisory Watch this product
Cisco Security Advisoriescisco-sa-snort3-misc-dos-6mB22qAK
Medium

Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities

Multiple Cisco products are affected by vulnerabilities in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart unexpectedly, resulting in a denial of service (DoS) condition. For more information ab...

Affected products1000 Series Integrated Services Routers (ISRs), 4000 Series ISRs, 8100 Series Secure Routers, 8200 Series Secure Routers
Vendor guidance

Cisco has released software updates that address these vulnerabilities.

CVE-2026-20019CVE-2026-20179CVE-2026-20197CVE-2026-76489
Read the vendor advisory Watch this product
Cisco Security Advisoriescisco-sa-snort3-gre-JNpMHrTv
Medium

Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause an unexpected restart of the Snort 3 Detection Engine. ...

Affected productsConnectivity Over Security, Balanced Security and Connectivity, Security Over Connectivity, Maximum Detection
Vendor guidance

Cisco has released software updates that address this vulnerability.

CVE-2026-20221
Read the vendor advisory Watch this product
Cisco Security Advisoriescisco-sa-snort3-gtpcodec-dos-Rmecfepz
Medium

Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition. The vulnerability is due to a f...

Affected products1000 Series Integrated Services Routers (ISRs), 4000 Series ISRs, 8100 Series Secure Routers, 8200 Series Secure Routers
Vendor guidance

Cisco has released software updates that address this vulnerability.

CVE-2026-76445
Read the vendor advisory Watch this product
AWS Security BulletinsCVE-2026-115416
Severity not listed

CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing

Bulletin ID: 2026-144-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/22/2026 09:30 AM PDT Description: Amazon Athena is an interactive query service that allows you to analyze data in Amazon S3 using standard SQL. We identified CVE-2026-115416...

CVE-2026-115416
Read the vendor advisory
Ubuntu Security NoticesUSN-8953-1
Severity not listed

USN-8953-1: OpenVPN vulnerability

It was discovered that OpenVPN incorrectly handled certificate subject fields. A remote authenticated user could possibly use this issue to impersonate other users.

Read the vendor advisory
Ubuntu Security NoticesUSN-8952-1
Severity not listed

USN-8952-1: Tornado vulnerabilities

It was discovered that Tornado did not properly handle certain HTTP requests and network inputs. An attacker could possibly use these issues to cause a denial of service, expose sensitive information, or bypass access controls. (CVE-2023-54397, CVE-2024-14029, CVE-2026-91990, ...

CVE-2023-54397CVE-2024-14029CVE-2026-91990CVE-2026-91992CVE-2026-103262CVE-2026-103263
Read the vendor advisory
Microsoft Security Response CenterCVE-2026-33554
HighCVSS 7.5

ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermic

Mariner

Affected productscbl2 freeipmi 1.6.6-3 on CBL Mariner 2.0, azl3 freeipmi 1.6.11-1 on Azure Linux 3.0, cbl2 freeipmi 1.6.6-3 on CBL-Mariner 2.0
Fixed versions1.6.17-1
Vendor guidance

CBL-Mariner Releases Release Notes

CVE-2026-33554
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources