Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,986Advisories collected
6,744Published or updated in 30 days
8,727Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,986 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Citrix Security BulletinsCTX696397
Medium

XenServer Security Update for CVE-2026-4397

An issue has been identified in XenServer 8.4 which, when starting a VM on a host with limited available memory, may allow a privileged user in that newly starting VM to access memory data of a previously terminated VM. This issue has the following identifier:

Affected productsXenServer, This issue affects XenServer 8.4. (Note that XenServer 9 is in Public Preview; releases in preview state are not intended for production use and so are not covered by security bulletins until they exit preview state.)
Vendor guidance

We have pushed updates to both the Early Access and Normal update channels of XenServer 8.4. We recommend that customers update to the latest version from their chosen channel following the instructions at https://doc...

CVE-2026-4397
Read the vendor advisory Watch this product
Citrix Security BulletinsCTX696350
High

XenServer Security Update for CVE-2026-23554

An issue has been identified in XenServer 8.4 that may allow privileged code in a guest VM to compromise the host. This issue has the following identifier:

Affected productsXenServer, This issue affects XenServer 8.4. (Note that XenServer 9.0 is in Public Preview; releases in preview state are not intended for production use and so are not covered by security bulletins until they exit preview state.)
Vendor guidance

We have pushed updates to both the Early Access and Normal update channels of XenServer 8.4. We recommend that customers update to the latest version from their chosen channel following the instructions at https://doc...

CVE-2026-23554
Read the vendor advisory Watch this product
Citrix Security BulletinsCTX695486
Medium

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-12101

NetScaler ADC and NetScaler Gateway are affected by the vulnerability mentioned below:

Affected productsNetScaler ADC and NetScaler Gateway, The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the vulnerabilities: NetScaler ADC and NetScaler Gateway 14.1 BEFORE 14.1-56.73 NetScaler ADC and NetScaler Gateway 13.1 BEFORE 13.1-60.32 NetScaler ADC 13.1-FIPS and NDcPP BEFORE 13.1-37.250-FIPS and NDcPP NetScaler ADC 12.1-FIPS and NDcPP BEFORE 12.1-55.333-FIPS and NDcPP Note: NetScaler ADC and NetScaler Gateway versions 12.1 and 13.0 are now End Of Life (EOL) and are vulnerable. Customers are recommended to upgrade their appliances to one of the supported versions that address the vulnerabilities.
Fixed versionsNetScaler ADC and NetScaler Gateway 14.1-56.73 and later releases, NetScaler ADC and NetScaler Gateway 13.1-60.32 and later releases of 13.1, NetScaler ADC 13.1-FIPS and 13.1-NDcPP 13.1-37.250 and later releases of 13.1-FIPS and 13.1-NDcPP, NetScaler ADC 12.1-FIPS and 12.1-NDcPP 12.1-55.333 and later releases of 12.1-FIPS and 12.1-NDcPP
Vendor guidance

Cloud Software Group strongly urges affected customers of NetScaler ADC and NetScaler Gateway to install the relevant updated versions as soon as possible. NetScaler ADC and NetScaler Gateway 14.1-56.73 and later rele...

CVE-2025-12101
Read the vendor advisory Watch this product
Delinea Security AdvisoriesCVE-2025-12811
MediumCVSS 6.9

Delinea Cloud Suite and Privileged Access Service - HTTP Request Smuggling vulnerability - CVE-2025-12811

Improper Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Delinea Inc. Cloud Suite and Privileged Access Service. If you're not using the latest Server Suite agents, this fix requires that you upgrade to Server Suite 2023.1 (agent 6.0.1) or later. If ...

Affected productsDelinea Cloud Suite and Privileged Access Service version 25.1 HF4 and earlier
Fixed versionsUpgrade to version 25.1 HF5 or later
Vendor guidance

Upgrade to version 25.1 HF5 or later

CVE-2025-12811
Read the vendor advisory Watch this product
Delinea Security AdvisoriesCVE-2025-12812
MediumCVSS 5.3

Delinea Cloud Suite and Privileged Access Service - SQL Injection vulnerability - CVE-2025-12812

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Delinea Inc. Cloud Suite and Privileged Access Service.

Affected productsDelinea Cloud Suite and Privileged Access Service version 23.1.2 and earlier
Fixed versionsUpgrade to Cloud Suite version 25.1 or later
Vendor guidance

Upgrade to Cloud Suite version 25.1 or later

CVE-2025-12812
Read the vendor advisory Watch this product
Delinea Security AdvisoriesCVE-2026-2409
CriticalCVSS 9.3

Delinea Cloud Suite on-prem argument injection vulnerability - CVE-2026-2409

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delinea Cloud Suite allows Argument Injection.

Affected productsCloud Suite before 25.2 HF1Resolution:Upgrade to Cloud Suite version 25.2 HF1 or later
Fixed versionsUpgrade to Cloud Suite version 25.2 HF1 or later
Vendor guidance

Upgrade to Cloud Suite version 25.2 HF1 or later

CVE-2026-2409
Read the vendor advisory Watch this product
Delinea Security AdvisoriesCVE-2025-12810
MediumCVSS 5.3

Delinea Secret Server on-prem RPC Password Rotation authentication vulnerability - CVE-2025-12810

Improper Authentication vulnerability in Delinea Inc. Secret Server On-Prem (RPC Password Rotation modules). This issue affects Secret Server On-Prem: 11.8.1, 11.9.6, 11.9.25.

Affected productsDelinea Secret Server on-prem versions 11.8.1, 11.9.6, and 11.9.25
Fixed versionsUpgrade to Secret Server version 11.9.47 or later The secret will remain checked out when the password change fails.
Vendor guidance

Upgrade to Secret Server version 11.9.47 or later The secret will remain checked out when the password change fails.

CVE-2025-12810
Read the vendor advisory Watch this product
Palo Alto Networks Security AdvisoriesCVE-2025-4619
HighCVSS 8.7

CVE-2025-4619: PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Packets

A denial-of-service (DoS) vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to reboot a firewall by sending a specially crafted packet through the dataplane. Repeated attempts to initiate a reboot causes the firewall to enter maintenance m...

Affected productsCloud NGFW, PAN-OS, Prisma Access, PAN-OS 12.1
Fixed versionsCloud NGFW All, PAN-OS 12.1 All, PAN-OS 11.2 >= 11.2.2-h2, >= 11.2.3-h6, >= 11.2.4-h4, >= 11.2.5, PAN-OS 11.1 < 11.1.2-h9, >= 11.1.2-h18, < 11.1.3-h2, < 11.1.4-h4, >= 11.1.4-h13, >= 11.1.6-h1, >= 11.1.7
Vendor guidance

VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.1 No action needed. PAN-OS 11.2 11.2.0 through 11.2.4 Upgrade to 11.2.4-h4 or 11.2.5 or later. 11.2.0 through 11.2.3 Upgrade to 11.2.3-h6...

CVE-2025-4619
Read the vendor advisory Watch this product
Palo Alto Networks Security AdvisoriesPAN-SA-2025-0012
InformationalCVSS 0.0

PAN-SA-2025-0012: Informational Bulletin: OSS CVEs Fixed in PAN-OS

The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to PAN-OS. While it was not determined that these CVEs have any significant impact on PAN-OS, they have been fixed out of an abundance of caution.

Affected productsPAN-OS
Fixed versionsPAN-OS All
Vendor guidance

The OSS CVEs are fixed in the respective PAN-OS versions.

Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources