Advisory changes

Showing 48 of 48 changes, newest first. 1 wording-only change is hidden.

1. 14 Oct 2026FortinetFG-IR-26-175

   Recorded in the revision history

   Improper limitation of a pathname to a restricted directory

   Version table: 3 rows added and 3 rows removed. One new row reads "FortiMail 8.0 | 8.0.0 through 8.0.1 | Upgrade to 8.0.2 or above".

   • Fixed versions

   Version table rows

   BeforeFortiMail 8.0 | 8.0.0 through 8.0.1 | Upgrade to upcoming 8.0.2 or above; FortiMail 7.6 | 7.6.0 through 7.6.6 | Upgrade to upcoming 7.6.7 or above; FortiMail 7.4 | 7.4.0 through 7.4.8 | Upgrade to upcoming 7.4.9 or above

   AfterFortiMail 8.0 | 8.0.0 through 8.0.1 | Upgrade to 8.0.2 or above; FortiMail 7.6 | 7.6.0 through 7.6.6 | Upgrade to 7.6.7 or above; FortiMail 7.4 | 7.4.0 through 7.4.8 | Upgrade to 7.4.9 or above

2. 4 Oct 2026Ciscocisco-sa-fmc-static-cred-BET3Cjh

   Recorded in the revision history

   Cisco Secure Firewall Management Center Software Static Credential Vulnerability

   Version table: 7 rows added and 6 rows removed. One new row reads "7.0 and earlier | 7.0.10".

   • Fixed versions

   Version table rows

   Before7.0 | Cisco_Firepower_Mgmt_Center_Hotfix_GB-7.0.9.1-3.sh.REL.tar; 7.2 | Cisco_Secure_FW_Mgmt_Center_Hotfix_HL-7.2.11.1-4.sh.REL.tar; 7.4 | Cisco_Secure_FW_Mgmt_Center_Hotfix_HG-7.4.7.1-3.sh.REL.tar; 7.6 | Cisco_Secure_FW_Mgmt_Center_Hotfix_CY-7.6.5.1-2.sh.REL.tar

   After7.0 and earlier | 7.0.10; 7.2 | 7.2.12; 7.4 | 7.4.8; 7.6 | 7.6.6

3. 3 Oct 2026FortinetFG-IR-26-175

   Changed without a revision note

   Improper limitation of a pathname to a restricted directory

   Workaround text changed.

   • Workaround

   Workaround

   BeforeDisable the IBE feature support using the following CLI command: config system encryption ibe set status disable end Alternatively: Disable access to the FortiMail management interface from the internet or limit the access only from trusted private network Indicators of Compromise (IoC): Files: * [A

   AfterDisable the IBE feature support via the GUI ( Encryption -> IBE -> IBE Service 'off' ) or with the following CLI command: config system encryption ibe set status disable end Alternatively: - Disable access to the FortiMail webmail interface from the internet or limit the access only from trusted pri

4. 25 Sep 2026Ciscocisco-sa-onprem-fmc-authbypass-5JPp45V2

   Recorded in the revision history

   Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability

   Version table: 7 rows added and 6 rows removed. One new row reads "7.0 and earlier | 7.0.10". Revision 2.5 date changed from 2026-09-09 to 2026-09-16.

   • Fixed versions
   • Revision date changed

   Version table rows

   Before7.0 | Cisco_Firepower_Mgmt_Center_Hotfix_GB-7.0.9.1-3.sh.REL.tar; 7.2 | Cisco_Secure_FW_Mgmt_Center_Hotfix_HL-7.2.11.1-4.sh.REL.tar; 7.4 | Cisco_Secure_FW_Mgmt_Center_Hotfix_HG-7.4.7.1-3.sh.REL.tar; 7.6 | Cisco_Secure_FW_Mgmt_Center_Hotfix_CY-7.6.5.1-2.sh.REL.tar

   After7.0 and earlier | 7.0.10; 7.2 | 7.2.12; 7.4 | 7.4.8; 7.6 | 7.6.6

   Revision 2.5 date

   Before2026-09-09

   After2026-09-16

5. 17 Sep 2026Ciscocisco-sa-asaftd-vpn-dos-dzv4mQFF

   Recorded in the revision history

   Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

   Version table: 13 rows added and 12 rows removed. One new row reads "9.16 and earlier | 9.16.4.103".

   • Fixed versions

   Version table rows

   Before9.16 1 | 89.16.4.50; 9.18 1 | 89.18.4.50; 9.20 | 9.20.4.235; 9.22 | 9.22.3.191

   After9.16 and earlier | 9.16.4.103; 9.18 | 9.18.4.94; 9.20 | 9.20.4.49; 9.22 | 9.22.3.26

6. 17 Sep 2026Palo Alto NetworksCVE-2024-0012

   Recorded in the revision history

   Palo Alto Networks Security Advisories /

   Version table: 2 rows added and 2 rows removed. One new row reads "PAN-OS 11.2 | = 11.2.0-h1 >= 11.2.1-h1 >= 11.2.2-h2 >= 11.2.3-h3 >= 11.2.4-h1".

   • Fixed versions

   Version table rows

   BeforePAN-OS 11.2 | = 11.2.1-h1 >= 11.2.2-h2 >= 11.2.3-h3 >= 11.2.4-h1; PAN-OS 10.2 | = 10.2.0-h4 >= 10.2.1-h3 >= 10.2.2-h6 >= 10.2.3-h14 >= 10.2.4-h32 >= 10.2.5-h9 >= 10.2.6-h6 >= 10.2.7-h18 >= 10.2.8-h15 >= 10.2.9-h16 >= 10.2.10-h9 >= 10.2.11-h6 >= 10.2.12-h2 >= 10.2.12-h2

   AfterPAN-OS 11.2 | = 11.2.0-h1 >= 11.2.1-h1 >= 11.2.2-h2 >= 11.2.3-h3 >= 11.2.4-h1; PAN-OS 10.2 | = 10.2.0-h4 >= 10.2.1-h3 >= 10.2.2-h6 >= 10.2.3-h14 >= 10.2.4-h32 >= 10.2.5-h9 >= 10.2.6-h6 >= 10.2.7-h18 >= 10.2.8-h15 >= 10.2.9-h16 >= 10.2.10-h9 >= 10.2.11-h6 >= 10.2.12-h2

7. 10 Sep 2026Ciscocisco-sa-onprem-fmc-authbypass-5JPp45V2

   Recorded in the revision history

   Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability

   Advisory now says the bug is exploited (earlier version: vendor not aware).

   • Exploitation status

   Exploitation status

   Beforevendor not aware of exploitation

   Aftervendor aware of exploitation

8. 14 Aug 2026Ciscocisco-sa-fmc-static-cred-BET3Cjh

   Recorded in the revision history

   Cisco Secure Firewall Management Center Software Static Credential Vulnerability

   Revision 1.3 date changed from 2026-08-05 to 2026-08-03.

   • Revision date changed

   Revision 1.3 date

   Before2026-08-05

   After2026-08-03

9. 6 Aug 2026Ciscocisco-sa-onprem-fmc-authbypass-5JPp45V2

   Recorded in the revision history

   Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability

   Revision 2.0 date changed from 2026-07-29 to 2026-07-31.

   • Revision date changed

   Revision 2.0 date

   Before2026-07-29

   After2026-07-31

10. 22 Jul 2026Ciscocisco-sa-sdwan-privesc-4uxFrdzx

    Recorded in the revision history

    Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability

    Version table: 1 row added. One new row reads "20.18.2.2 and earlier | 20.18.3.1".

    • Fixed versions

    Version table rows

    Beforenot present

    After20.18.2.2 and earlier | 20.18.3.1

    Before

    Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability Cisco Security Advisory Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability High Advisory ID: cisco-sa-sdwan-privesc-4uxFrdzx First Published: 2026 June 4 22:27 GMT Last Update

    After

    t Fixed Release 20.9.9.1 and earlier | 20.9.9.2 20.12.7.1 and earlier | 20.12.7.2 20.15.4.4 and earlier | 20.15.4.5 20.15.5.2 and earlier | 20.15.5.3 20.18.2.2 and earlier | 20.18.3.1 20.18.3 | 20.18.3.1 26.1.1.1 and earlier | 26.1.1.2 The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory. Exploitatio

11. 19 Jul 2026Ciscocisco-sa-cucm-ssrf-cXPnHcW

    Recorded in the revision history

    Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

    Advisory now says the bug is exploited (earlier version: vendor not aware).

    • Exploitation status

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

12. 9 Jul 2026Palo Alto NetworksPAN-SA-2024-0015

    Recorded in the revision history

    Palo Alto Networks Security Advisories /

    CVSS base vector changed from AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L to AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N. Published date changed from 2024-11-08 to 2024-11-18.

    • Severity
    • Dates

    CVSS vector

    BeforeAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

    AfterAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N

    Published date

    Before2024-11-08

    After2024-11-18

    Before

    ur scan did not find any devices with internet-facing management interface for your account.​​ Severity: CRITICAL CVSSv4.0 Base Score: 9.3 ( CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:A/AU:Y/R:U/V:C/RE:M/U:Red ) Exploitation Status Palo Alto Networks has observed threat activity exploiting an unauthenticated remote command execution vulnerability against a limited number of

    After

    ighest when you allow access to the management interface from external IP addresses on the internet. CRITICAL - CVSS-BT: 9.3 / CVSS-B: 9.3 ( CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:A/AU:N/R:U/V:C/RE:H/U:Red ) If you configure restricted access to a jump box that is the only system allowed to access the management interface, you greatly reduce the risk of exploitation beca

13. 9 Jul 2026FortinetFG-IR-26-060

    Changed without a revision note

    Administrative FortiCloud SSO authentication bypass

    Version table: 2 rows added and 1 row removed. One new row reads "FortiNAC-F 7.6 | 7.6.3 through 7.6.5 | Upgrade to 7.6.6 or above".

    • Fixed versions

    Version table rows

    BeforeFortiSwitchManager 7.0 | 7.0.0 through 7.0.7 | Upgrade to upcoming 7.0.8 or above

    AfterFortiNAC-F 7.6 | 7.6.3 through 7.6.5 | Upgrade to 7.6.6 or above; FortiSwitchManager 7.0 | 7.0.0 through 7.0.7 | Upgrade to 7.0.8 or above

    Before

    or above FortiProxy 7.0 | 7.0.0 through 7.0.22 | Upgrade to 7.0.23 or above FortiSwitchManager 7.2 | 7.2.0 through 7.2.8 | Upgrade to 7.2.9 or above FortiSwitchManager 7.0 | 7.0.0 through 7.0.7 | Upgrade to upcoming 7.0.8 or above FortiWeb 8.0 | 8.0.0 through 8.0.3 | Upgrade to 8.0.4 or above FortiWeb 7.6 | 7.6.0 through 7.6.6 | Upgrade to 7.6.7 or above FortiWeb 7.4 | 7.4.0 through 7.4.11 | Upgr

    After

    11 | Upgrade to 7.2.12 or above FortiManager 7.0 | 7.0.0 through 7.0.15 | Upgrade to 7.0.16 or above FortiManager 6.4 | Not affected | Not Applicable FortiNAC-F 7.6 | 7.6.3 through 7.6.5 | Upgrade to 7.6.6 or above FortiNAC-F 7.4 | Not affected | Not Applicable FortiNAC-F 7.2 | Not affected | Not Applicable FortiOS 8.0 | Not affected | Not Applicable FortiOS 7.6 | 7.6.0 through 7.6.5 | Upgrade to

14. 16 Jun 2026Ciscocisco-sa-sdwan-privesc-4uxFrdzx

    Recorded in the revision history

    Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability

    Version table: 2 rows added and 2 rows removed. One new row reads "20.9.9.1 and earlier | 20.9.9.2".

    • Fixed versions

    Version table rows

    Before20.9.9.1 and earlier | Future release; 20.12.7.1 and earlier | Future release

    After20.9.9.1 and earlier | 20.9.9.2; 20.12.7.1 and earlier | 20.12.7.2

15. 3 Jun 2026Ciscocisco-sa-sdwan-rpa2-v69WY2SW

    Recorded in the revision history

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Revision 1.0 date changed from 2026-05-14 to 2026-05-27.

    • Revision date changed

    Revision 1.0 date

    Before2026-05-14

    After2026-05-27

16. 31 May 2026Palo Alto NetworksCVE-2026-0257

    Recorded in the revision history

    PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

    CVSS exploit maturity changed from unreported to attacked (displayed score 4.7 to 7.8). Advisory now says the bug is exploited (earlier version: vendor not aware). Version table: 4 rows added and 4 rows removed. One new row reads "PAN-OS 12.1 | = 12.1.4-h6 >= 12.1.7".

    • Severity
    • Exploitation status
    • Fixed versions

    CVSS exploit maturity

    Beforeunreported

    Afterattacked

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

    Version table rows

    BeforePAN-OS 12.1 | = 12.1.4-h6 (ETA: 05/18) >= 12.1.7 (ETA: 05/28); PAN-OS 11.2 | = 11.2.4-h17 (ETA: 05/28) >= 11.2.7-h14 (ETA: 05/14) >= 11.2.10-h7 (ETA: 05/14) >= 11.2.12 (ETA: 05/28); PAN-OS 11.1 | = 11.1.4-h33 >= 11.1.6-h32 >= 11.1.7-h6 (ETA: 05/28) >= 11.1.10-h25 >= 11.1.13-h5 >= 11.1.15 (ETA: 05/28

    AfterPAN-OS 12.1 | = 12.1.4-h6 >= 12.1.7; PAN-OS 11.2 | = 11.2.4-h17 >= 11.2.7-h14 >= 11.2.10-h7 >= 11.2.12; PAN-OS 11.1 | = 11.1.4-h33 >= 11.1.6-h32 >= 11.1.7-h6 >= 11.1.10-h25 >= 11.1.13-h5 >= 11.1.15; PAN-OS 10.2 | = 10.2.7-h34 >= 10.2.10-h36 >= 10.2.13-h21 >= 10.2.16-h7 >= 10.2.18-h6

17. 28 May 2026Palo Alto NetworksCVE-2026-0300

    Recorded in the revision history

    PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

    Version table: 1 row added and 1 row removed. One new row reads "PAN-OS 10.2 | = 10.2.7-h34 (ETA: 05/28) >= 10.2.10-h36 >= 10.2.13-h21 >= 10.2.16-h7 >= 10.".

    • Fixed versions

    Version table rows

    BeforePAN-OS 10.2 | = 10.2.7-h34 (ETA: 05/28) >= 10.2.10-h36 >= 10.2.13-h21 (ETA: 05/28) >= 10.2.16-h7 (ETA: 05/28) >= 10.2.18-h6

    AfterPAN-OS 10.2 | = 10.2.7-h34 (ETA: 05/28) >= 10.2.10-h36 >= 10.2.13-h21 >= 10.2.16-h7 >= 10.2.18-h6

    Before

    10-h6 >= 11.2.12 (ETA: 05/28) PAN-OS 11.1 | = 11.1.4-h33 >= 11.1.6-h32 >= 11.1.7-h6 (ETA: 05/28) >= 11.1.10-h25 >= 11.1.13-h5 >= 11.1.15 (ETA: 05/28) PAN-OS 10.2 | = 10.2.7-h34 (ETA: 05/28) >= 10.2.10-h36 >= 10.2.13-h21 (ETA: 05/28) >= 10.2.16-h7 (ETA: 05/28) >= 10.2.18-h6 Prisma Access | None | All Required Configuration for Exposure This issue is applicable only to PA-Series and VM-Series firewa

    After

    10-h6 >= 11.2.12 (ETA: 05/28) PAN-OS 11.1 | = 11.1.4-h33 >= 11.1.6-h32 >= 11.1.7-h6 (ETA: 05/28) >= 11.1.10-h25 >= 11.1.13-h5 >= 11.1.15 (ETA: 05/28) PAN-OS 10.2 | = 10.2.7-h34 (ETA: 05/28) >= 10.2.10-h36 >= 10.2.13-h21 >= 10.2.16-h7 >= 10.2.18-h6 Prisma Access | None | All Required Configuration for Exposure This issue is applicable only to PA-Series and VM-Series firewalls that are configured to

18. 17 May 2026FortinetFG-IR-26-099

    Changed without a revision note

    API authentication and authorization bypass

    Version table: 1 row added and 1 row removed. One new row reads "FortiClientEMS 7.4 | 7.4.5 through 7.4.6 | Upgrade to 7.4.7 or above".

    • Fixed versions

    Version table rows

    BeforeFortiClientEMS 7.4 | 7.4.5 through 7.4.6 | Upgrade to upcoming 7.4.7 or above

    AfterFortiClientEMS 7.4 | 7.4.5 through 7.4.6 | Upgrade to 7.4.7 or above

    Before

    MS 7.4.7 will also include a fix for this issue. In the meantime the hotfix above is sufficient to prevent it entirely. Version | Affected | Solution FortiClientEMS 7.4 | 7.4.5 through 7.4.6 | Upgrade to upcoming 7.4.7 or above FortiClientEMS 7.2 | Not affected | Not Applicable Fortinet remediated this issue in FortiClient Cloud and hence customers do not need to perform any action. Fortinet remed

    After

    MS 7.4.7 will also include a fix for this issue. In the meantime the hotfix above is sufficient to prevent it entirely. Version | Affected | Solution FortiClientEMS 7.4 | 7.4.5 through 7.4.6 | Upgrade to 7.4.7 or above FortiClientEMS 7.2 | Not affected | Not Applicable Fortinet remediated this issue in FortiClient Cloud and hence customers do not need to perform any action. Fortinet remediated thi

19. 13 May 2026Palo Alto NetworksCVE-2026-0300

    Recorded in the revision history

    PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

    Version table: 21 rows added and 4 rows removed. One new row reads "PAN-OS 12.1 | = 12.1.4-h5 >= 12.1.7 (ETA: 05/28)".

    • Fixed versions

    Version table rows

    BeforePAN-OS 12.1 | = 12.1.4-h5 (ETA: 05/13) >= 12.1.7 (ETA: 05/28); PAN-OS 11.2 | = 11.2.4-h17 (ETA: 05/28) >= 11.2.7-h13 (ETA: 05/13) >= 11.2.10-h6 (ETA: 05/13) >= 11.2.12 (ETA: 05/28); PAN-OS 11.1 | = 11.1.4-h33 (ETA: 05/13) >= 11.1.6-h32 (ETA: 05/13) >= 11.1.7-h6 (ETA: 05/28) >= 11.1.10-h25 (ETA: 05/1

    AfterPAN-OS 12.1 | = 12.1.4-h5 >= 12.1.7 (ETA: 05/28); PAN-OS 11.2 | = 11.2.4-h17 (ETA: 05/28) >= 11.2.7-h13 >= 11.2.10-h6 >= 11.2.12 (ETA: 05/28); PAN-OS 11.1 | = 11.1.4-h33 >= 11.1.6-h32 >= 11.1.7-h6 (ETA: 05/28) >= 11.1.10-h25 >= 11.1.13-h5 >= 11.1.15 (ETA: 05/28); PAN-OS 10.2 | = 10.2.7-h34 (ETA: 05/

20. 8 Apr 2026FortinetFG-IR-25-1142

    Changed without a revision note

    SQLi in administrative interface

    Advisory now says the bug is exploited (earlier version: vendor not aware).

    • Exploitation status

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

21. 22 Mar 2026Ciscocisco-sa-fmc-rce-NKhnULJh

    Recorded in the revision history

    Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

    Advisory now says the bug is exploited (earlier version: vendor not aware).

    • Exploitation status

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

22. 5 Mar 2026Ciscocisco-sa-sdwan-authbp-qwCX8D4v

    Recorded in the revision history

    Cisco Catalyst SD-WAN Vulnerabilities

    Advisory now says the bug is exploited (earlier version: vendor not aware). Version table: 2 rows added and 2 rows removed. One new row reads "20.9 | 20.9.8.2".

    • Exploitation status
    • Fixed versions

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

    Version table rows

    Before20.9 | 20.9.8.2 (Estimated release February 27, 2026); 20.12.5 20.12.6 | 20.12.5.3 20.12.6.1

    After20.9 | 20.9.8.2; 20.12 | 20.12.5.3 20.12.6.1

23. 28 Feb 2026Ciscocisco-sa-sdwan-rpa-EHchtZk

    Recorded in the revision history

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Version table: 2 rows added and 2 rows removed. One new row reads "20.9 | 20.9.8.2".

    • Fixed versions

    Version table rows

    Before20.9 | 20.9.8.2 (Estimated release February 27, 2026); 20.12.5 20.12.6 | 20.12.5.3 20.12.6.1

    After20.9 | 20.9.8.2; 20.12 | 20.12.5.3 20.12.6.1

24. 26 Feb 2026Ciscocisco-sa-sd-wan-priv-E6e8tEdF

    Recorded in the revision history

    Cisco SD-WAN Software Privilege Escalation Vulnerabilities

    Advisory now says the bug is exploited (earlier version: vendor not aware).

    • Exploitation status

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

25. 21 Feb 2026FortinetFG-IR-26-060

    Changed without a revision note

    Administrative FortiCloud SSO authentication bypass

    Version table: 15 rows added and 13 rows removed. One new row reads "FortiAnalyzer 7.2 | 7.2.0 through 7.2.11 | Upgrade to 7.2.12 or above".

    • Fixed versions

    Version table rows

    BeforeFortiAnalyzer 7.2 | 7.2.0 through 7.2.11 | Upgrade to upcoming 7.2.12 or above; FortiAnalyzer 7.0 | 7.0.0 through 7.0.15 | Upgrade to upcoming 7.0.16 or above; FortiManager 7.2 | 7.2.0 through 7.2.11 | Upgrade to upcoming 7.2.12 or above; FortiManager 7.0 | 7.0.0 through 7.0.15 | Upgrade to upcoming

    AfterFortiAnalyzer 7.2 | 7.2.0 through 7.2.11 | Upgrade to 7.2.12 or above; FortiAnalyzer 7.0 | 7.0.0 through 7.0.15 | Upgrade to 7.0.16 or above; FortiManager 7.2 | 7.2.0 through 7.2.11 | Upgrade to 7.2.12 or above; FortiManager 7.0 | 7.0.0 through 7.0.15 | Upgrade to 7.0.16 or above

26. 31 Jan 2026FortinetFG-IR-26-060

    Changed without a revision note

    Administrative FortiCloud SSO authentication bypass

    Version table: 6 rows added and 4 rows removed. One new row reads "FortiAnalyzer 7.6 | 7.6.0 through 7.6.5 | Upgrade to 7.6.6 or above".

    • Fixed versions

    Version table rows

    BeforeFortiAnalyzer 7.6 | 7.6.0 through 7.6.5 | Upgrade to upcoming 7.6.6 or above; FortiManager 7.6 | 7.6.0 through 7.6.5 | Upgrade to upcoming 7.6.6 or above; FortiManager 7.2 | 7.2.0 through 7.2.11 | Upgrade to upcoming 7.2.13 or above; FortiOS 7.6 | 7.6.0 through 7.6.5 | Upgrade to upcoming 7.6.6 or a

    AfterFortiAnalyzer 7.6 | 7.6.0 through 7.6.5 | Upgrade to 7.6.6 or above; FortiManager 7.6 | 7.6.0 through 7.6.5 | Upgrade to 7.6.6 or above; FortiManager 7.2 | 7.2.0 through 7.2.11 | Upgrade to upcoming 7.2.12 or above; FortiOS 7.6 | 7.6.0 through 7.6.5 | Upgrade to 7.6.6 or above

27. 28 Jan 2026FortinetFG-IR-26-060

    Changed without a revision note

    Administrative FortiCloud SSO authentication bypass

    Version table: 3 rows added. One new row reads "FortiWeb 8.0 | 8.0.0 through 8.0.3 | Upgrade to upcoming 8.0.4 or above".

    • Fixed versions

    Version table rows

    Beforenot present

    AfterFortiWeb 8.0 | 8.0.0 through 8.0.3 | Upgrade to upcoming 8.0.4 or above; FortiWeb 7.6 | 7.6.0 through 7.6.6 | Upgrade to upcoming 7.6.7 or above; FortiWeb 7.4 | 7.4.0 through 7.4.11 | Upgrade to upcoming 7.4.12 or above

28. 28 Jan 2026FortinetFG-IR-26-060

    Changed without a revision note

    Administrative FortiCloud SSO authentication bypass

    Version table: 3 rows added and 3 rows removed. One new row reads "FortiAnalyzer 7.4 | 7.4.0 through 7.4.9 | Upgrade to 7.4.10 or above". Workaround text changed.

    • Fixed versions
    • Workaround

    Version table rows

    BeforeFortiAnalyzer 7.4 | 7.4.0 through 7.4.9 | Upgrade to upcoming 7.4.10 or above; FortiManager 7.4 | 7.4.0 through 7.4.9 | Upgrade to upcoming 7.4.10 or above; FortiOS 7.4 | 7.4.0 through 7.4.10 | Upgrade to upcoming 7.4.11 or above

    AfterFortiAnalyzer 7.4 | 7.4.0 through 7.4.9 | Upgrade to 7.4.10 or above; FortiManager 7.4 | 7.4.0 through 7.4.9 | Upgrade to 7.4.10 or above; FortiOS 7.4 | 7.4.0 through 7.4.10 | Upgrade to 7.4.11 or above

    Workaround

    BeforeFortiCloud SSO authentication no longer supports login from devices running vulnerable versions. Therefore disabling FortiCloud SSO login on client side is not necessary at the moment. For reference, it can be nonetheless be done via the following: go to System -> Settings -> Switch "Allow administr

    AfterFortiCloud SSO authentication no longer supports login from devices running vulnerable versions. Therefore disabling FortiCloud SSO login on client side is not necessary at the moment. For reference, it can be nonetheless be done via the following: On FortiOS and FortiProxy: go to System -> Settings

29. 25 Nov 2025FortinetFG-IR-25-910

    Changed without a revision note

    Path confusion vulnerability in GUI

    CVSS exploit maturity changed from functional to high (displayed score 9.1 to 9.4).

    • Severity

    CVSS exploit maturity

    Beforefunctional

    Afterhigh

30. 7 Oct 2025Ciscocisco-sa-snmp-x4LPhte

    Recorded in the revision history

    Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

    Revision 2.2 date changed from 2025-10-02 to 2025-10-06.

    • Revision date changed

    Revision 2.2 date

    Before2025-10-02

    After2025-10-06

31. 22 Jul 2025Ciscocisco-sa-ise-unauth-rce-ZAd2GnJ6

    Recorded in the revision history

    Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities

    Advisory now says the bug is exploited (earlier version: vendor not aware).

    • Exploitation status

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

32. 18 Jul 2025FortinetFG-IR-25-151

    Recorded in the revision history

    Unauthenticated SQL injection in GUI

    Advisory now says the bug is exploited.

    • Exploitation status

    Exploitation status

    Beforenot stated

    Aftervendor aware of exploitation

33. 26 Apr 2025ConnectWisescreenconnect-security-patch-2025.4

    Changed without a revision note

    ScreenConnect 25.2.4 Security Patch

    CVSS base vector changed from AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

    • Severity

    CVSS vector

    BeforeAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

    AfterAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

    Before

    tes, and ScreenConnect is not an outlier. Vulnerability CWE ID | Description | Base Score | Vector CWE-287 | Improper Authentication | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity High—Vulnerabilities that could compromise confidential data or other processing resources but require additional access / privilege to do so. Priority 1 High—Vulnerabilities that are either being targeted

    After

    tes, and ScreenConnect is not an outlier. Vulnerability CWE ID | Description | Base Score | Vector CWE-287 | Improper Authentication | 8.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Severity Important—Vulnerabilities that could compromise confidential data or other processing resources but require additional access / privilege to do so. Priority 1 High—Vulnerabilities that are either being tar

34. 17 Apr 2025SonicWallSNWLID-2021-0022

    Recorded in the revision history

    created_when: 2021-09-23T21:29:13Z

    CVSS base vector changed from AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H to AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (score 5.5 to 7.2).

    • Severity

    CVSS vector

    BeforeAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

    AfterAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

    Before

    d Injection Vulnerability published_when: 2021-09-23T21:29:13Z last_updated_when: 2025-04-14T17:58:18Z impact: medium cvss: 5.5 cvss_vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H cvss_version: 3.0 cwe: CWE-78 cve: CVE-2021-20035 cpe: summary: Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as

    After

    and Injection Vulnerability published_when: 2021-09-23T21:29:13Z last_updated_when: 2025-04-15T15:50:44Z impact: high cvss: 7.2 cvss_vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H cvss_version: 3.0 cwe: CWE-78 cve: CVE-2021-20035 cpe: summary: Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as

35. 6 Apr 2025Ciscocisco-sa-cslu-7gHMzWmw

    Recorded in the revision history

    Cisco Smart Licensing Utility Vulnerabilities

    Advisory now says the bug is exploited (earlier version: vendor not aware).

    • Exploitation status

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

36. 27 Mar 2025CommvaultCV_2025_03_1

    Recorded in the revision history

    CV_2025_03_1: Critical Webserver Vulnerability HIGH

    Version table: 1 row added and 1 row removed. One new row reads "Commvault | Linux, Windows | 11.32.0 - 11.32.88 | 11.32.89 | Resolved".

    • Fixed versions

    Version table rows

    BeforeCommvault | Linux, Windows | 11.32.0 - 11.32.87 | 11.32.88 | Resolved

    AfterCommvault | Linux, Windows | 11.32.0 - 11.32.88 | 11.32.89 | Resolved

    Before

    ed Products Product | Platforms | Affected Versions | Resolved Version | Status Commvault | Linux, Windows | 11.36.0 - 11.36.45 | 11.36.46 | Resolved Commvault | Linux, Windows | 11.32.0 - 11.32.87 | 11.32.88 | Resolved Commvault | Linux, Windows | 11.28.0 - 11.28.140 | 11.28.141 | Resolved Commvault | Linux, Windows | 11.20.0 - 11.20.216 | 11.20.217 | Resolved Resolution To prevent this issue, im

    After

    ed Products Product | Platforms | Affected Versions | Resolved Version | Status Commvault | Linux, Windows | 11.36.0 - 11.36.45 | 11.36.46 | Resolved Commvault | Linux, Windows | 11.32.0 - 11.32.88 | 11.32.89 | Resolved Commvault | Linux, Windows | 11.28.0 - 11.28.140 | 11.28.141 | Resolved Commvault | Linux, Windows | 11.20.0 - 11.20.216 | 11.20.217 | Resolved Resolution To prevent this issue, im

37. 10 Mar 2025Palo Alto NetworksCVE-2025-0111

    Recorded in the revision history

    PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

    Version table: 9 rows added and 4 rows removed. One new row reads "PAN-OS 11.2 | = 11.2.4-h4 >= 11.2.5".

    • Fixed versions

    Version table rows

    BeforePAN-OS 11.2 | = 11.2.4-h4; PAN-OS 11.1 | = 11.1.6-h1; PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.12-h6 >= 10.2.13-h3; PAN-OS 11.2 | 11.2.0 through 11.2.4 | Upgrade to 11.2.4-h4 or later

    AfterPAN-OS 11.2 | = 11.2.4-h4 >= 11.2.5; PAN-OS 11.1 | = 11.1.2-h18 >= 11.1.4-h13 >= 11.1.6-h1; PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.10-h14 >= 10.2.11-h12 >= 10.2.12-h6 >= 10.2.13-h3; 10.2.10 | Upgrade to 10.2.10-h14 or 10.2.13-h3 or later

38. 7 Mar 2025Ciscocisco-sa-sbr042-multi-vuln-ej76Pke5

    Recorded in the revision history

    Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Vulnerabilities

    Advisory now says the bug is exploited (earlier version: vendor not aware).

    • Exploitation status

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

39. 20 Feb 2025Palo Alto NetworksCVE-2025-0108

    Recorded in the revision history

    PAN-OS: Authentication Bypass in the Management Web Interface

    Version table: 5 rows added and 2 rows removed. One new row reads "PAN-OS 11.1 | = 11.1.2-h18 >= 11.1.6-h1".

    • Fixed versions

    Version table rows

    BeforePAN-OS 11.1 | = 11.1.6-h1; PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.12-h6 >= 10.2.13-h3

    AfterPAN-OS 11.1 | = 11.1.2-h18 >= 11.1.6-h1; PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.10-h14 >= 10.2.11-h12 >= 10.2.12-h6 >= 10.2.13-h3; 10.2.10 | Upgrade to 10.2.10-h14 or 10.2.13-h3 or later; 10.2.11 | Upgrade to 10.2.11-h12 or 10.2.13-h3 or later

40. 19 Feb 2025Palo Alto NetworksCVE-2025-0111

    Recorded in the revision history

    PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

    CVSS exploit maturity changed from unreported to attacked (displayed score 4.9 to 7.1). Advisory now says the bug is exploited (earlier version: vendor not aware). Version table: 5 rows added and 1 row removed. One new row reads "PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.12-h6 >= 10.2.13-h3".

    • Severity
    • Exploitation status
    • Fixed versions

    CVSS exploit maturity

    Beforeunreported

    Afterattacked

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

    Version table rows

    BeforePAN-OS 10.2 | = 10.2.13-h3

    AfterPAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.12-h6 >= 10.2.13-h3; 10.2.7 | Upgrade to 10.2.7-h24 or 10.2.13-h3 or later; 10.2.8 | Upgrade to 10.2.8-h21 or 10.2.13-h3 or later; 10.2.9 | Upgrade to 10.2.9-h21 or 10.2.13-h3 or later

41. 19 Feb 2025Palo Alto NetworksCVE-2025-0108

    Recorded in the revision history

    PAN-OS: Authentication Bypass in the Management Web Interface

    CVSS exploit maturity changed from proof of concept to attacked (displayed score 7.8 to 8.8). Advisory now says the bug is exploited (earlier version: vendor not aware). Version table: 5 rows added and 1 row removed. One new row reads "PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.12-h6 >= 10.2.13-h3".

    • Severity
    • Exploitation status
    • Fixed versions

    CVSS exploit maturity

    Beforeproof of concept

    Afterattacked

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

    Version table rows

    BeforePAN-OS 10.2 | = 10.2.13-h3

    AfterPAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.12-h6 >= 10.2.13-h3; 10.2.7 | Upgrade to 10.2.7-h24 or 10.2.13-h3 or later; 10.2.8 | Upgrade to 10.2.8-h21 or 10.2.13-h3 or later; 10.2.9 | Upgrade to 10.2.9-h21 or 10.2.13-h3 or later

42. 4 Feb 2025Palo Alto NetworksCVE-2024-3393

    Recorded in the revision history

    Palo Alto Networks Security Advisories /

    Version table: 1 row added and 1 row removed. One new row reads "PAN-OS 11.1 | = 11.1.2-h16 >= 11.1.3-h13 >= 11.1.4-h7 >= 11.1.5".

    • Fixed versions

    Version table rows

    BeforePAN-OS 11.1 | = 11.1.2-h16 >= 11.1.3-h13 >= 11.1.4-h6 >= 11.1.5

    AfterPAN-OS 11.1 | = 11.1.2-h16 >= 11.1.3-h13 >= 11.1.4-h7 >= 11.1.5

    Before

    ma Access. Product Status Versions | Affected | Unaffected Cloud NGFW | None | All PAN-OS | None on Panorama | All on Panorama PAN-OS 11.2 | = 11.2.3 PAN-OS 11.1 | = 11.1.2-h16 >= 11.1.3-h13 >= 11.1.4-h6 >= 11.1.5 PAN-OS 10.2 | >= 10.2.8 = 10.2.8-h19 >= 10.2.9-h19 >= 10.2.10-h12 >= 10.2.11-h10 >= 10.2.12-h4 >= 10.2.13-h2 >= 10.2.14 PAN-OS 10.1 | >= 10.1.14 = 10.1.14-h8 >= 10.1.15 PAN-OS 10.0 | Non

    After

    ma Access. Product Status Versions | Affected | Unaffected Cloud NGFW | None | All PAN-OS | None on Panorama | All on Panorama PAN-OS 11.2 | = 11.2.3 PAN-OS 11.1 | = 11.1.2-h16 >= 11.1.3-h13 >= 11.1.4-h7 >= 11.1.5 PAN-OS 10.2 | >= 10.2.8 = 10.2.8-h19 >= 10.2.9-h19 >= 10.2.10-h12 >= 10.2.11-h10 >= 10.2.12-h4 >= 10.2.13-h2 >= 10.2.14 PAN-OS 10.1 | >= 10.1.14 = 10.1.14-h8 >= 10.1.15 PAN-OS 10.0 | Non

43. 25 Jan 2025Palo Alto NetworksCVE-2024-3393

    Recorded in the revision history

    Palo Alto Networks Security Advisories /

    Workaround text changed.

    • Workaround

    Workaround

    BeforeIf your firewall running the vulnerable PAN-OS versions stops responding or reboots unexpectedly and you cannot immediately apply a fix, apply a workaround below based on your deployment. Unmanaged NGFWs, NGFW managed by Panorama, or Prisma Access managed by Panorama Within Objects → Security Profil

    AfterIf your firewall running the vulnerable PAN-OS versions stops responding or reboots unexpectedly and you cannot immediately apply a fix, apply a workaround below based on your deployment. Unmanaged NGFWs, NGFW managed by Panorama, or Prisma Access managed by Panorama Ensure that a DNS Security Confi

44. 3 Jan 2025Palo Alto NetworksCVE-2024-3393

    Recorded in the revision history

    Palo Alto Networks Security Advisories /

    Workaround text changed.

    • Workaround

    Workaround

    BeforeIf your firewall running the vulnerable PAN-OS versions stops responding or reboots unexpectedly and you cannot immediately apply a fix, apply a workaround below based on your deployment. Unmanaged NGFWs, NGFW managed by Panorama, or Prisma Access managed by Panorama For each Anti-spyware profile, n

    AfterIf your firewall running the vulnerable PAN-OS versions stops responding or reboots unexpectedly and you cannot immediately apply a fix, apply a workaround below based on your deployment. Unmanaged NGFWs, NGFW managed by Panorama, or Prisma Access managed by Panorama Within Objects → Security Profil

45. 15 Nov 2024Palo Alto NetworksPAN-SA-2024-0010

    Recorded in the revision history

    Expedition: Multiple Vulnerabilities in Expedition Lead to Exposure of Firewall Credentials

    Advisory now says the bug is exploited (earlier version: vendor not aware).

    • Exploitation status

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

46. 8 Nov 2024Palo Alto NetworksCVE-2024-5910

    Recorded in the revision history

    Expedition: Missing Authentication Leads to Admin Account Takeover

    Advisory now says the bug is exploited (earlier version: vendor not aware).

    • Exploitation status

    Exploitation status

    Beforevendor not aware of exploitation

    Aftervendor aware of exploitation

47. 23 May 2022AtlassianJRASERVER-72695

    Changed without a revision note

    Public Security Vulnerability

    Workaround text changed.

    • Workaround

    Workaround

    BeforeUntil the upgrade you may use the following workaround to protect the files: https://confluence.atlassian.com/jirakb/workaround-for-cve-2019-15004-979416164.html Attachments Issue Links relates to CONFSERVER-60469 Pre-Authorization Limited Arbitrary File Read in Confluence Server - CVE-2020-29448 Pu

    AfterUntil the upgrade you may use the following workaround to protect the files: https://confluence.atlassian.com/jirakb/workaround-for-cve-2019-15004-979416164.html Note: Workaround 1 in the above KB article is not valid for this purpose. Workaround 2 (proxy/load balancer configuration) is valid. Attac

48. 30 Nov 2021AtlassianJRASERVER-72695

    Changed without a revision note

    Public Security Vulnerability

    Workaround text added.

    • Workaround

    Workaround

    Beforenot present

    AfterUntil the upgrade you may use the following workaround to protect the files: https://confluence.atlassian.com/jirakb/workaround-for-cve-2019-15004-979416164.html Attachments Issue Links relates to CONFSERVER-60469 Pre-Authorization Limited Arbitrary File Read in Confluence Server - CVE-2020-29448 Pu