Skip to content
Log in Sign up My account

Security Advisories

Updated Oct 31, 2026 5:36 PM UTC. Headlines link to the original publishers.

Vendor security advisories for network gear, plus the network-vendor entries in the CISA Known Exploited Vulnerabilities catalog. Anything in the KEV list is being exploited in the wild: patch or mitigate it first.

Known exploited vulnerabilities (network vendors)

Added Vendor Product CVE Vulnerability Due date (US federal)
Oct 30, 2026 Ivanti Connect Secure CVE-2026-118527 Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability Nov 13, 2026
Oct 30, 2026 Ivanti Connect Secure CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability Nov 2, 2026
Oct 29, 2026 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software CVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value... Nov 1, 2026
Oct 28, 2026 Broadcom VMware ESX CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability Nov 11, 2026
Oct 23, 2026 Arista VeloCloud Orchestrator CVE-2026-114625 Arista VeloCloud Orchestrator SQL Injection Vulnerability Oct 26, 2026
Oct 16, 2026 Fortinet Multiple Products CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability Oct 19, 2026
Oct 14, 2026 Cisco Secure Email Gateway CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability Oct 17, 2026
Oct 14, 2026 Palo Alto Networks PAN-OS CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability Oct 17, 2026
Oct 13, 2026 Ivanti Connect Secure CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability Oct 16, 2026
Oct 4, 2026 Citrix NetScaler CVE-2026-88779 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer... Oct 7, 2026
Oct 1, 2026 Fortinet FortiMail CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability Oct 4, 2026
Sep 30, 2026 Cisco Catalyst SD-WAN Manager CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability Oct 3, 2026
Sep 27, 2026 Citrix NetScaler CVE-2026-88772 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer... Sep 30, 2026
Sep 27, 2026 Citrix NetScaler CVE-2026-88771 Citrix NetScaler Improper Input Validation Vulnerability Sep 30, 2026
Sep 25, 2026 MikroTik RouterOS CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability Sep 28, 2026
Sep 22, 2026 Arista VeloCloud Orchestrator CVE-2026-93952 Arista VeloCloud Orchestrator Improper Input Validation Vulnerability Sep 25, 2026
Sep 22, 2026 F5 BIG-IP APM CVE-2026-94127 F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability Sep 25, 2026
Sep 22, 2026 Check Point Multiple Products CVE-2026-93616 Check Point Multiple Products Path Traversal Vulnerability Sep 25, 2026
Sep 22, 2026 Check Point Multiple Products CVE-2026-85102 Check Point Multiple Products Improper Certificate Validation Vulnerability Sep 25, 2026
Sep 21, 2026 Zyxel GS1900 Series Switches CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability Sep 24, 2026
Sep 16, 2026 Cisco Identity Services Engine CVE-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Sep 19, 2026
Sep 14, 2026 Cisco Secure Email Gateway CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability Sep 17, 2026
Sep 10, 2026 MikroTik RouterOS CVE-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command... Sep 13, 2026
Sep 10, 2026 MikroTik RouterOS CVE-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function Vulnerability Sep 13, 2026
Sep 9, 2026 Citrix NetScaler CVE-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability Sep 12, 2026
Sep 9, 2026 Fortinet Multiple Products CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Sep 12, 2026
Sep 9, 2026 Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel... Sep 12, 2026
Sep 2, 2026 SonicWall SMA1000 Appliances CVE-2026-83548 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability Sep 5, 2026
Sep 2, 2026 SonicWall SMA1000 Appliances CVE-2026-83549 SonicWall SMA1000 Appliances OS Command Injection Vulnerability Sep 5, 2026
Aug 26, 2026 Citrix NetScaler ADC and NetScaler Gateway CVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the... Aug 29, 2026
Aug 18, 2026 Broadcom VMware vCenter CVE-2026-59310 Broadcom VMware vCenter Path Traversal Vulnerability Aug 21, 2026
Aug 11, 2026 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) CVE-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat... Aug 14, 2026
Jul 29, 2026 Cisco Secure Firewall Management Center (FMC) CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability Aug 1, 2026
Jul 27, 2026 Fortinet FortiOS CVE-2025-68686 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Aug 10, 2026
Jul 27, 2026 Arista VeloCloud Orchestrator CVE-2026-16812 Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Jul 30, 2026
Jul 22, 2026 Check Point SmartConsole CVE-2026-16232 Check Point SmartConsole Improper Authentication Vulnerability Jul 25, 2026
Jul 16, 2026 Fortinet FortiSandbox CVE-2026-25089 Fortinet FortiSandbox OS Command Injection Vulnerability Jul 19, 2026
Jul 16, 2026 Fortinet FortiSandbox CVE-2026-39808 Fortinet FortiSandbox OS Command Injection Vulnerability Jul 19, 2026
Jul 14, 2026 SonicWall SMA1000 Appliances CVE-2026-15409 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability Jul 17, 2026
Jul 14, 2026 SonicWall SMA1000 Appliances CVE-2026-15410 SonicWall SMA1000 Appliances Code Injection Vulnerability Jul 17, 2026

Vendor advisories

Cisco

Date Source Item
Oct 30, 2026 Cisco Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Oct 30, 2026 Cisco Vulnerabilities in Node.js Affecting Cisco Products: October 2026
Oct 30, 2026 Cisco Vulnerabilities in PHP Affecting Cisco Products: October 2026
Oct 29, 2026 Cisco Cisco Finesse Server-Side Request Forgery Vulnerability
Oct 28, 2026 Cisco Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Oct 28, 2026 Cisco Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
Oct 28, 2026 Cisco Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
Oct 27, 2026 Cisco Cisco Unified Communications Products Security Hardening Release: October 2026
Oct 27, 2026 Cisco Cisco Expressway Series Security Hardening Release: October 2026
Oct 22, 2026 Cisco Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
Oct 22, 2026 Cisco Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
Oct 22, 2026 Cisco Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities
Oct 22, 2026 Cisco Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability
Oct 22, 2026 Cisco Multiple Cisco Products Snort 3 Denial of Service Vulnerability
Oct 22, 2026 Cisco Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability
Oct 21, 2026 Cisco Cisco Advance Notification for Publication of October 21, 2026, Security Advisories
Oct 21, 2026 Cisco Cisco Expressway Series Information Disclosure Vulnerability
Oct 21, 2026 Cisco Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability
Oct 21, 2026 Cisco Cisco Unified Communications Manager Improper Access Control Vulnerability
Oct 21, 2026 Cisco Cisco Expressway Series Remote Code Execution Vulnerability
Oct 21, 2026 Cisco Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability
Oct 21, 2026 Cisco Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability
Oct 20, 2026 Cisco Cisco Unified Intelligence Center SQL Injection Vulnerability
Oct 15, 2026 Cisco Cisco Meraki Security Hardening Release: October 2026
Oct 14, 2026 Cisco Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026

Palo Alto Networks

Date Source Item
Oct 31, 2026 Palo Alto Networks CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)
Oct 29, 2026 Palo Alto Networks CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)
Oct 17, 2026 Palo Alto Networks CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
Oct 15, 2026 Palo Alto Networks CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)
Oct 15, 2026 Palo Alto Networks CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)
Oct 15, 2026 Palo Alto Networks CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW)
Oct 15, 2026 Palo Alto Networks CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)
Oct 15, 2026 Palo Alto Networks CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (Severity: LOW)
Oct 14, 2026 Palo Alto Networks CVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities (Severity: MEDIUM)
Oct 14, 2026 Palo Alto Networks CVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS (Severity: MEDIUM)
Oct 14, 2026 Palo Alto Networks CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW)
Oct 14, 2026 Palo Alto Networks PAN-SA-2026-0013 Chromium: Monthly Vulnerability Update (October 2026) (Severity: HIGH)
Oct 14, 2026 Palo Alto Networks CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM)
Oct 14, 2026 Palo Alto Networks CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability (Severity: MEDIUM)
Oct 14, 2026 Palo Alto Networks CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows (Severity: MEDIUM)
Oct 14, 2026 Palo Alto Networks CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM)
Oct 2, 2026 Palo Alto Networks CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)

Fortinet

Date Source Item
Oct 26, 2026 Fortinet Node2Shell CVEs
Oct 21, 2026 Fortinet PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
Oct 13, 2026 Fortinet Arbitrary file write in grpc phQueryMaster
Oct 13, 2026 Fortinet Broken authorization
Oct 13, 2026 Fortinet Double free in signal handler
Oct 13, 2026 Fortinet Fabric API Authentication bypass
Oct 13, 2026 Fortinet GUI Denial of Service
Oct 13, 2026 Fortinet Improper access control and session management in the web management interface
Oct 13, 2026 Fortinet Multiple Arbitrary File Read/Write via SQL Injection
Oct 13, 2026 Fortinet Persistent Denial of Service in Admin Profile
Oct 13, 2026 Fortinet SQL command injection in webmail
Oct 13, 2026 Fortinet arbitrary command execution in fgfmsd daemon
Oct 1, 2026 Fortinet Improper limitation of a pathname to a restricted directory

Where to watch