https://daystopatch.com/changes/ Security advisories that changed after publication, with both archived versions. en Sat, 24 Oct 2026 03:00:15 GMT https://daystopatch.com/changes/#fortinet-fg-ir-26-175-202610141826 fortinet-fg-ir-26-175-202610141826 Wed, 14 Oct 2026 18:26:37 GMT Improper limitation of a pathname to a restricted directory. Version table: 3 rows added and 3 rows removed. One new row reads "FortiMail 8.0 | 8.0.0 through 8.0.1 | Upgrade to 8.0.2 or above". Recorded in the revision history. Version table rows: FortiMail 8.0 | 8.0.0 through 8.0.1 | Upgrade to upcoming 8.0.2 or above; FortiMail 7.6 | 7.6.0 through 7.6.6 | Upgrade to upcoming 7.6.7 or above; FortiMail 7.4 | 7.4.0 through 7.4.8 | Upgrade to upcoming 7.4.9 or above → FortiMail 8.0 | 8.0.0 through 8.0.1 | Upgrade to 8.0.2 or above; FortiMail 7.6 | 7.6.0 through 7.6.6 | Upgrade to 7.6.7 or above; FortiMail 7.4 | 7.4.0 through 7.4.8 | Upgrade to 7.4.9 or above. Earlier version: https://web.archive.org/web/20261003170513/https://fortiguard.fortinet.com/psirt/FG-IR-26-175 Later version: https://web.archive.org/web/20261014182637/https://fortiguard.fortinet.com/psirt/FG-IR-26-175 https://daystopatch.com/changes/#cisco-cisco-sa-fmc-static-cred-bet3cjh-202610040055 cisco-cisco-sa-fmc-static-cred-bet3cjh-202610040055 Sun, 04 Oct 2026 00:55:13 GMT Cisco Secure Firewall Management Center Software Static Credential Vulnerability. Version table: 7 rows added and 6 rows removed. One new row reads "7.0 and earlier | 7.0.10". Recorded in the revision history. Version table rows: 7.0 | Cisco_Firepower_Mgmt_Center_Hotfix_GB-7.0.9.1-3.sh.REL.tar; 7.2 | Cisco_Secure_FW_Mgmt_Center_Hotfix_HL-7.2.11.1-4.sh.REL.tar; 7.4 | Cisco_Secure_FW_Mgmt_Center_Hotfix_HG-7.4.7.1-3.sh.REL.tar; 7.6 | Cisco_Secure_FW_Mgmt_Center_Hotfix_CY-7.6.5.1-2.sh.REL.tar → 7.0 and earlier | 7.0.10; 7.2 | 7.2.12; 7.4 | 7.4.8; 7.6 | 7.6.6. Earlier version: https://web.archive.org/web/20260814174812/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh Later version: https://web.archive.org/web/20261004005513/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh https://daystopatch.com/changes/#fortinet-fg-ir-26-175-202610031310 fortinet-fg-ir-26-175-202610031310 Sat, 03 Oct 2026 13:10:21 GMT Improper limitation of a pathname to a restricted directory. Workaround text changed. Changed without a revision note. Workaround: Disable the IBE feature support using the following CLI command: config system encryption ibe set status disable end Alternatively: Disable access to the FortiMail management interface from the internet or limit the access only from trusted private network Indicators of Compromise (IoC): Files: * [A → Disable the IBE feature support via the GUI ( Encryption -> IBE -> IBE Service 'off' ) or with the following CLI command: config system encryption ibe set status disable end Alternatively: - Disable access to the FortiMail webmail interface from the internet or limit the access only from trusted pri. Earlier version: https://web.archive.org/web/20261002085720/https://fortiguard.fortinet.com/psirt/FG-IR-26-175 Later version: https://web.archive.org/web/20261003131021/https://fortiguard.fortinet.com/psirt/FG-IR-26-175 https://daystopatch.com/changes/#cisco-cisco-sa-onprem-fmc-authbypass-5jpp45v2-202609250356 cisco-cisco-sa-onprem-fmc-authbypass-5jpp45v2-202609250356 Fri, 25 Sep 2026 03:56:35 GMT Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability. Version table: 7 rows added and 6 rows removed. One new row reads "7.0 and earlier | 7.0.10". Revision 2.5 date changed from 2026-09-09 to 2026-09-16. Recorded in the revision history. Version table rows: 7.0 | Cisco_Firepower_Mgmt_Center_Hotfix_GB-7.0.9.1-3.sh.REL.tar; 7.2 | Cisco_Secure_FW_Mgmt_Center_Hotfix_HL-7.2.11.1-4.sh.REL.tar; 7.4 | Cisco_Secure_FW_Mgmt_Center_Hotfix_HG-7.4.7.1-3.sh.REL.tar; 7.6 | Cisco_Secure_FW_Mgmt_Center_Hotfix_CY-7.6.5.1-2.sh.REL.tar → 7.0 and earlier | 7.0.10; 7.2 | 7.2.12; 7.4 | 7.4.8; 7.6 | 7.6.6; Revision 2.5 date: 2026-09-09 → 2026-09-16. Earlier version: https://web.archive.org/web/20260910114311/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 Later version: https://web.archive.org/web/20260925035635/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 https://daystopatch.com/changes/#cisco-cisco-sa-asaftd-vpn-dos-dzv4mqff-202609171225 cisco-cisco-sa-asaftd-vpn-dos-dzv4mqff-202609171225 Thu, 17 Sep 2026 12:25:31 GMT Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability. Version table: 13 rows added and 12 rows removed. One new row reads "9.16 and earlier | 9.16.4.103". Recorded in the revision history. Version table rows: 9.16 1 | 89.16.4.50; 9.18 1 | 89.18.4.50; 9.20 | 9.20.4.235; 9.22 | 9.22.3.191 → 9.16 and earlier | 9.16.4.103; 9.18 | 9.18.4.94; 9.20 | 9.20.4.49; 9.22 | 9.22.3.26. Earlier version: https://web.archive.org/web/20260812113107/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF Later version: https://web.archive.org/web/20260917122531/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF https://daystopatch.com/changes/#palo-alto-networks-https-security-paloaltonetworks-com-cve-2024-0012-202609170615 palo-alto-networks-https-security-paloaltonetworks-com-cve-2024-0012-202609170615 Thu, 17 Sep 2026 06:15:10 GMT Palo Alto Networks Security Advisories /. Version table: 2 rows added and 2 rows removed. One new row reads "PAN-OS 11.2 | = 11.2.0-h1 >= 11.2.1-h1 >= 11.2.2-h2 >= 11.2.3-h3 >= 11.2.4-h1". Recorded in the revision history. Version table rows: PAN-OS 11.2 | = 11.2.1-h1 >= 11.2.2-h2 >= 11.2.3-h3 >= 11.2.4-h1; PAN-OS 10.2 | = 10.2.0-h4 >= 10.2.1-h3 >= 10.2.2-h6 >= 10.2.3-h14 >= 10.2.4-h32 >= 10.2.5-h9 >= 10.2.6-h6 >= 10.2.7-h18 >= 10.2.8-h15 >= 10.2.9-h16 >= 10.2.10-h9 >= 10.2.11-h6 >= 10.2.12-h2 >= 10.2.12-h2 → PAN-OS 11.2 | = 11.2.0-h1 >= 11.2.1-h1 >= 11.2.2-h2 >= 11.2.3-h3 >= 11.2.4-h1; PAN-OS 10.2 | = 10.2.0-h4 >= 10.2.1-h3 >= 10.2.2-h6 >= 10.2.3-h14 >= 10.2.4-h32 >= 10.2.5-h9 >= 10.2.6-h6 >= 10.2.7-h18 >= 10.2.8-h15 >= 10.2.9-h16 >= 10.2.10-h9 >= 10.2.11-h6 >= 10.2.12-h2. Earlier version: https://web.archive.org/web/20250204135645/https://security.paloaltonetworks.com/CVE-2024-0012 Later version: https://web.archive.org/web/20260917061510/https://security.paloaltonetworks.com/CVE-2024-0012 https://daystopatch.com/changes/#cisco-cisco-sa-onprem-fmc-authbypass-5jpp45v2-202609101143 cisco-cisco-sa-onprem-fmc-authbypass-5jpp45v2-202609101143 Thu, 10 Sep 2026 11:43:11 GMT Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability. Advisory now says the bug is exploited (earlier version: vendor not aware). Recorded in the revision history. Exploitation status: vendor not aware of exploitation → vendor aware of exploitation. Earlier version: https://web.archive.org/web/20260806025140/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 Later version: https://web.archive.org/web/20260910114311/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 https://daystopatch.com/changes/#cisco-cisco-sa-fmc-static-cred-bet3cjh-202608141748 cisco-cisco-sa-fmc-static-cred-bet3cjh-202608141748 Fri, 14 Aug 2026 17:48:12 GMT Cisco Secure Firewall Management Center Software Static Credential Vulnerability. Revision 1.3 date changed from 2026-08-05 to 2026-08-03. Recorded in the revision history. Revision 1.3 date: 2026-08-05 → 2026-08-03. Earlier version: https://web.archive.org/web/20260805170239/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh Later version: https://web.archive.org/web/20260814174812/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh https://daystopatch.com/changes/#cisco-cisco-sa-onprem-fmc-authbypass-5jpp45v2-202608060251 cisco-cisco-sa-onprem-fmc-authbypass-5jpp45v2-202608060251 Thu, 06 Aug 2026 02:51:40 GMT Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability. Revision 2.0 date changed from 2026-07-29 to 2026-07-31. Recorded in the revision history. Revision 2.0 date: 2026-07-29 → 2026-07-31. Earlier version: https://web.archive.org/web/20260730210310/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 Later version: https://web.archive.org/web/20260806025140/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 https://daystopatch.com/changes/#cisco-cisco-sa-sdwan-privesc-4uxfrdzx-202607220548 cisco-cisco-sa-sdwan-privesc-4uxfrdzx-202607220548 Wed, 22 Jul 2026 05:48:47 GMT Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability. Version table: 1 row added. One new row reads "20.18.2.2 and earlier | 20.18.3.1". Recorded in the revision history. Version table rows: not present → 20.18.2.2 and earlier | 20.18.3.1. Earlier version: https://web.archive.org/web/20260616134143/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx Later version: https://web.archive.org/web/20260722054847/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx https://daystopatch.com/changes/#cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202607190231 cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202607190231 Sun, 19 Jul 2026 02:31:05 GMT Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability. Advisory now says the bug is exploited (earlier version: vendor not aware). Recorded in the revision history. Exploitation status: vendor not aware of exploitation → vendor aware of exploitation. Earlier version: https://web.archive.org/web/20260604063648/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW Later version: https://web.archive.org/web/20260719023105/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW https://daystopatch.com/changes/#palo-alto-networks-https-security-paloaltonetworks-com-pan-sa-2024-0015-202607092014 palo-alto-networks-https-security-paloaltonetworks-com-pan-sa-2024-0015-202607092014 Thu, 09 Jul 2026 20:14:07 GMT Palo Alto Networks Security Advisories /. CVSS base vector changed from AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L to AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N. Published date changed from 2024-11-08 to 2024-11-18. Recorded in the revision history. CVSS vector: AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L → AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N; Published date: 2024-11-08 → 2024-11-18. Earlier version: https://web.archive.org/web/20241118141710/https://security.paloaltonetworks.com/PAN-SA-2024-0015 Later version: https://web.archive.org/web/20260709201407/https://security.paloaltonetworks.com/PAN-SA-2024-0015 https://daystopatch.com/changes/#fortinet-fg-ir-26-060-202607091543 fortinet-fg-ir-26-060-202607091543 Thu, 09 Jul 2026 15:43:57 GMT Administrative FortiCloud SSO authentication bypass. Version table: 2 rows added and 1 row removed. One new row reads "FortiNAC-F 7.6 | 7.6.3 through 7.6.5 | Upgrade to 7.6.6 or above". Changed without a revision note. Version table rows: FortiSwitchManager 7.0 | 7.0.0 through 7.0.7 | Upgrade to upcoming 7.0.8 or above → FortiNAC-F 7.6 | 7.6.3 through 7.6.5 | Upgrade to 7.6.6 or above; FortiSwitchManager 7.0 | 7.0.0 through 7.0.7 | Upgrade to 7.0.8 or above. Earlier version: https://web.archive.org/web/20260221112003/https://fortiguard.fortinet.com/psirt/FG-IR-26-060 Later version: https://web.archive.org/web/20260709154357/https://fortiguard.fortinet.com/psirt/FG-IR-26-060 https://daystopatch.com/changes/#cisco-cisco-sa-sdwan-privesc-4uxfrdzx-202606161341 cisco-cisco-sa-sdwan-privesc-4uxfrdzx-202606161341 Tue, 16 Jun 2026 13:41:43 GMT Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability. Version table: 2 rows added and 2 rows removed. One new row reads "20.9.9.1 and earlier | 20.9.9.2". Recorded in the revision history. Version table rows: 20.9.9.1 and earlier | Future release; 20.12.7.1 and earlier | Future release → 20.9.9.1 and earlier | 20.9.9.2; 20.12.7.1 and earlier | 20.12.7.2. Earlier version: https://web.archive.org/web/20260612000550/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx Later version: https://web.archive.org/web/20260616134143/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx https://daystopatch.com/changes/#cisco-cisco-sa-sdwan-rpa2-v69wy2sw-202606031451 cisco-cisco-sa-sdwan-rpa2-v69wy2sw-202606031451 Wed, 03 Jun 2026 14:51:51 GMT Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability. Revision 1.0 date changed from 2026-05-14 to 2026-05-27. Recorded in the revision history. Revision 1.0 date: 2026-05-14 → 2026-05-27. Earlier version: https://web.archive.org/web/20260516203637/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW Later version: https://web.archive.org/web/20260603145151/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW https://daystopatch.com/changes/#palo-alto-networks-cve-2026-0257-202605310700 palo-alto-networks-cve-2026-0257-202605310700 Sun, 31 May 2026 07:00:03 GMT PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities. CVSS exploit maturity changed from unreported to attacked (displayed score 4.7 to 7.8). Advisory now says the bug is exploited (earlier version: vendor not aware). Version table: 4 rows added and 4 rows removed. One new row reads "PAN-OS 12.1 | = 12.1.4-h6 >= 12.1.7". Recorded in the revision history. CVSS exploit maturity: unreported → attacked; Exploitation status: vendor not aware of exploitation → vendor aware of exploitation; Version table rows: PAN-OS 12.1 | = 12.1.4-h6 (ETA: 05/18) >= 12.1.7 (ETA: 05/28); PAN-OS 11.2 | = 11.2.4-h17 (ETA: 05/28) >= 11.2.7-h14 (ETA: 05/14) >= 11.2.10-h7 (ETA: 05/14) >= 11.2.12 (ETA: 05/28); PAN-OS 11.1 | = 11.1.4-h33 >= 11.1.6-h32 >= 11.1.7-h6 (ETA: 05/28) >= 11.1.10-h25 >= 11.1.13-h5 >= 11.1.15 (ETA: 05/28 → PAN-OS 12.1 | = 12.1.4-h6 >= 12.1.7; PAN-OS 11.2 | = 11.2.4-h17 >= 11.2.7-h14 >= 11.2.10-h7 >= 11.2.12; PAN-OS 11.1 | = 11.1.4-h33 >= 11.1.6-h32 >= 11.1.7-h6 >= 11.1.10-h25 >= 11.1.13-h5 >= 11.1.15; PAN-OS 10.2 | = 10.2.7-h34 >= 10.2.10-h36 >= 10.2.13-h21 >= 10.2.16-h7 >= 10.2.18-h6. Earlier version: https://web.archive.org/web/20260514070609/https://security.paloaltonetworks.com/CVE-2026-0257 Later version: https://web.archive.org/web/20260531070003/https://security.paloaltonetworks.com/CVE-2026-0257 https://daystopatch.com/changes/#palo-alto-networks-cve-2026-0300-202605281757 palo-alto-networks-cve-2026-0300-202605281757 Thu, 28 May 2026 17:57:46 GMT PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal. Version table: 1 row added and 1 row removed. One new row reads "PAN-OS 10.2 | = 10.2.7-h34 (ETA: 05/28) >= 10.2.10-h36 >= 10.2.13-h21 >= 10.2.16-h7 >= 10.". Recorded in the revision history. Version table rows: PAN-OS 10.2 | = 10.2.7-h34 (ETA: 05/28) >= 10.2.10-h36 >= 10.2.13-h21 (ETA: 05/28) >= 10.2.16-h7 (ETA: 05/28) >= 10.2.18-h6 → PAN-OS 10.2 | = 10.2.7-h34 (ETA: 05/28) >= 10.2.10-h36 >= 10.2.13-h21 >= 10.2.16-h7 >= 10.2.18-h6. Earlier version: https://web.archive.org/web/20260513160304/https://security.paloaltonetworks.com/CVE-2026-0300 Later version: https://web.archive.org/web/20260528175746/https://security.paloaltonetworks.com/CVE-2026-0300 https://daystopatch.com/changes/#fortinet-fg-ir-26-099-202605172056 fortinet-fg-ir-26-099-202605172056 Sun, 17 May 2026 20:56:55 GMT API authentication and authorization bypass. Version table: 1 row added and 1 row removed. One new row reads "FortiClientEMS 7.4 | 7.4.5 through 7.4.6 | Upgrade to 7.4.7 or above". Changed without a revision note. Version table rows: FortiClientEMS 7.4 | 7.4.5 through 7.4.6 | Upgrade to upcoming 7.4.7 or above → FortiClientEMS 7.4 | 7.4.5 through 7.4.6 | Upgrade to 7.4.7 or above. Earlier version: https://web.archive.org/web/20260408092332/https://fortiguard.fortinet.com/psirt/FG-IR-26-099 Later version: https://web.archive.org/web/20260517205655/https://fortiguard.fortinet.com/psirt/FG-IR-26-099 https://daystopatch.com/changes/#palo-alto-networks-cve-2026-0300-202605131603 palo-alto-networks-cve-2026-0300-202605131603 Wed, 13 May 2026 16:03:04 GMT PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal. Version table: 21 rows added and 4 rows removed. One new row reads "PAN-OS 12.1 | = 12.1.4-h5 >= 12.1.7 (ETA: 05/28)". Recorded in the revision history. Version table rows: PAN-OS 12.1 | = 12.1.4-h5 (ETA: 05/13) >= 12.1.7 (ETA: 05/28); PAN-OS 11.2 | = 11.2.4-h17 (ETA: 05/28) >= 11.2.7-h13 (ETA: 05/13) >= 11.2.10-h6 (ETA: 05/13) >= 11.2.12 (ETA: 05/28); PAN-OS 11.1 | = 11.1.4-h33 (ETA: 05/13) >= 11.1.6-h32 (ETA: 05/13) >= 11.1.7-h6 (ETA: 05/28) >= 11.1.10-h25 (ETA: 05/1 → PAN-OS 12.1 | = 12.1.4-h5 >= 12.1.7 (ETA: 05/28); PAN-OS 11.2 | = 11.2.4-h17 (ETA: 05/28) >= 11.2.7-h13 >= 11.2.10-h6 >= 11.2.12 (ETA: 05/28); PAN-OS 11.1 | = 11.1.4-h33 >= 11.1.6-h32 >= 11.1.7-h6 (ETA: 05/28) >= 11.1.10-h25 >= 11.1.13-h5 >= 11.1.15 (ETA: 05/28); PAN-OS 10.2 | = 10.2.7-h34 (ETA: 05/. Earlier version: https://web.archive.org/web/20260510211609/https://security.paloaltonetworks.com/CVE-2026-0300 Later version: https://web.archive.org/web/20260513160304/https://security.paloaltonetworks.com/CVE-2026-0300 https://daystopatch.com/changes/#fortinet-fg-ir-25-1142-202604080353 fortinet-fg-ir-25-1142-202604080353 Wed, 08 Apr 2026 03:53:20 GMT SQLi in administrative interface. Advisory now says the bug is exploited (earlier version: vendor not aware). Changed without a revision note. Exploitation status: vendor not aware of exploitation → vendor aware of exploitation. Earlier version: https://web.archive.org/web/20260330133723/https://fortiguard.fortinet.com/psirt/FG-IR-25-1142 Later version: https://web.archive.org/web/20260408035320/https://fortiguard.fortinet.com/psirt/FG-IR-25-1142 https://daystopatch.com/changes/#cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202603220555 cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202603220555 Sun, 22 Mar 2026 05:55:49 GMT Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability. Advisory now says the bug is exploited (earlier version: vendor not aware). Recorded in the revision history. Exploitation status: vendor not aware of exploitation → vendor aware of exploitation. Earlier version: https://web.archive.org/web/20260315043121/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh Later version: https://web.archive.org/web/20260322055549/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh https://daystopatch.com/changes/#cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202603051723 cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202603051723 Thu, 05 Mar 2026 17:23:03 GMT Cisco Catalyst SD-WAN Vulnerabilities. Advisory now says the bug is exploited (earlier version: vendor not aware). Version table: 2 rows added and 2 rows removed. One new row reads "20.9 | 20.9.8.2". Recorded in the revision history. Exploitation status: vendor not aware of exploitation → vendor aware of exploitation; Version table rows: 20.9 | 20.9.8.2 (Estimated release February 27, 2026); 20.12.5 20.12.6 | 20.12.5.3 20.12.6.1 → 20.9 | 20.9.8.2; 20.12 | 20.12.5.3 20.12.6.1. Earlier version: https://web.archive.org/web/20260225163717/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v Later version: https://web.archive.org/web/20260305172303/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v https://daystopatch.com/changes/#cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202602280106 cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202602280106 Sat, 28 Feb 2026 01:06:03 GMT Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability. Version table: 2 rows added and 2 rows removed. One new row reads "20.9 | 20.9.8.2". Recorded in the revision history. Version table rows: 20.9 | 20.9.8.2 (Estimated release February 27, 2026); 20.12.5 20.12.6 | 20.12.5.3 20.12.6.1 → 20.9 | 20.9.8.2; 20.12 | 20.12.5.3 20.12.6.1. Earlier version: https://web.archive.org/web/20260225191204/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk Later version: https://web.archive.org/web/20260228010603/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk https://daystopatch.com/changes/#cisco-cisco-sa-sd-wan-priv-e6e8tedf-202602260824 cisco-cisco-sa-sd-wan-priv-e6e8tedf-202602260824 Thu, 26 Feb 2026 08:24:25 GMT Cisco SD-WAN Software Privilege Escalation Vulnerabilities. Advisory now says the bug is exploited (earlier version: vendor not aware). Recorded in the revision history. Exploitation status: vendor not aware of exploitation → vendor aware of exploitation. Earlier version: https://web.archive.org/web/20250418184150/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF Later version: https://web.archive.org/web/20260226082425/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF https://daystopatch.com/changes/#fortinet-fg-ir-26-060-202602211120 fortinet-fg-ir-26-060-202602211120 Sat, 21 Feb 2026 11:20:03 GMT Administrative FortiCloud SSO authentication bypass. Version table: 15 rows added and 13 rows removed. One new row reads "FortiAnalyzer 7.2 | 7.2.0 through 7.2.11 | Upgrade to 7.2.12 or above". Changed without a revision note. Version table rows: FortiAnalyzer 7.2 | 7.2.0 through 7.2.11 | Upgrade to upcoming 7.2.12 or above; FortiAnalyzer 7.0 | 7.0.0 through 7.0.15 | Upgrade to upcoming 7.0.16 or above; FortiManager 7.2 | 7.2.0 through 7.2.11 | Upgrade to upcoming 7.2.12 or above; FortiManager 7.0 | 7.0.0 through 7.0.15 | Upgrade to upcoming → FortiAnalyzer 7.2 | 7.2.0 through 7.2.11 | Upgrade to 7.2.12 or above; FortiAnalyzer 7.0 | 7.0.0 through 7.0.15 | Upgrade to 7.0.16 or above; FortiManager 7.2 | 7.2.0 through 7.2.11 | Upgrade to 7.2.12 or above; FortiManager 7.0 | 7.0.0 through 7.0.15 | Upgrade to 7.0.16 or above. Earlier version: https://web.archive.org/web/20260203011554/https://fortiguard.fortinet.com/psirt/FG-IR-26-060 Later version: https://web.archive.org/web/20260221112003/https://fortiguard.fortinet.com/psirt/FG-IR-26-060 https://daystopatch.com/changes/#fortinet-fg-ir-26-060-202601311318 fortinet-fg-ir-26-060-202601311318 Sat, 31 Jan 2026 13:18:45 GMT Administrative FortiCloud SSO authentication bypass. Version table: 6 rows added and 4 rows removed. One new row reads "FortiAnalyzer 7.6 | 7.6.0 through 7.6.5 | Upgrade to 7.6.6 or above". Changed without a revision note. Version table rows: FortiAnalyzer 7.6 | 7.6.0 through 7.6.5 | Upgrade to upcoming 7.6.6 or above; FortiManager 7.6 | 7.6.0 through 7.6.5 | Upgrade to upcoming 7.6.6 or above; FortiManager 7.2 | 7.2.0 through 7.2.11 | Upgrade to upcoming 7.2.13 or above; FortiOS 7.6 | 7.6.0 through 7.6.5 | Upgrade to upcoming 7.6.6 or a → FortiAnalyzer 7.6 | 7.6.0 through 7.6.5 | Upgrade to 7.6.6 or above; FortiManager 7.6 | 7.6.0 through 7.6.5 | Upgrade to 7.6.6 or above; FortiManager 7.2 | 7.2.0 through 7.2.11 | Upgrade to upcoming 7.2.12 or above; FortiOS 7.6 | 7.6.0 through 7.6.5 | Upgrade to 7.6.6 or above. Earlier version: https://web.archive.org/web/20260129071206/https://fortiguard.fortinet.com/psirt/FG-IR-26-060 Later version: https://web.archive.org/web/20260131131845/https://fortiguard.fortinet.com/psirt/FG-IR-26-060 https://daystopatch.com/changes/#fortinet-fg-ir-26-060-202601281927 fortinet-fg-ir-26-060-202601281927 Wed, 28 Jan 2026 19:27:52 GMT Administrative FortiCloud SSO authentication bypass. Version table: 3 rows added. One new row reads "FortiWeb 8.0 | 8.0.0 through 8.0.3 | Upgrade to upcoming 8.0.4 or above". Changed without a revision note. Version table rows: not present → FortiWeb 8.0 | 8.0.0 through 8.0.3 | Upgrade to upcoming 8.0.4 or above; FortiWeb 7.6 | 7.6.0 through 7.6.6 | Upgrade to upcoming 7.6.7 or above; FortiWeb 7.4 | 7.4.0 through 7.4.11 | Upgrade to upcoming 7.4.12 or above. Earlier version: https://web.archive.org/web/20260128020147/https://fortiguard.fortinet.com/psirt/FG-IR-26-060 Later version: https://web.archive.org/web/20260128192752/https://fortiguard.fortinet.com/psirt/FG-IR-26-060 https://daystopatch.com/changes/#fortinet-fg-ir-26-060-202601280201 fortinet-fg-ir-26-060-202601280201 Wed, 28 Jan 2026 02:01:47 GMT Administrative FortiCloud SSO authentication bypass. Version table: 3 rows added and 3 rows removed. One new row reads "FortiAnalyzer 7.4 | 7.4.0 through 7.4.9 | Upgrade to 7.4.10 or above". Workaround text changed. Changed without a revision note. Version table rows: FortiAnalyzer 7.4 | 7.4.0 through 7.4.9 | Upgrade to upcoming 7.4.10 or above; FortiManager 7.4 | 7.4.0 through 7.4.9 | Upgrade to upcoming 7.4.10 or above; FortiOS 7.4 | 7.4.0 through 7.4.10 | Upgrade to upcoming 7.4.11 or above → FortiAnalyzer 7.4 | 7.4.0 through 7.4.9 | Upgrade to 7.4.10 or above; FortiManager 7.4 | 7.4.0 through 7.4.9 | Upgrade to 7.4.10 or above; FortiOS 7.4 | 7.4.0 through 7.4.10 | Upgrade to 7.4.11 or above; Workaround: FortiCloud SSO authentication no longer supports login from devices running vulnerable versions. Therefore disabling FortiCloud SSO login on client side is not necessary at the moment. For reference, it can be nonetheless be done via the following: go to System -> Settings -> Switch "Allow administr → FortiCloud SSO authentication no longer supports login from devices running vulnerable versions. Therefore disabling FortiCloud SSO login on client side is not necessary at the moment. For reference, it can be nonetheless be done via the following: On FortiOS and FortiProxy: go to System -> Settings. Earlier version: https://web.archive.org/web/20260127225341/https://fortiguard.fortinet.com/psirt/FG-IR-26-060 Later version: https://web.archive.org/web/20260128020147/https://fortiguard.fortinet.com/psirt/FG-IR-26-060 https://daystopatch.com/changes/#fortinet-fg-ir-25-910-202511251226 fortinet-fg-ir-25-910-202511251226 Tue, 25 Nov 2025 12:26:21 GMT Path confusion vulnerability in GUI. CVSS exploit maturity changed from functional to high (displayed score 9.1 to 9.4). Changed without a revision note. CVSS exploit maturity: functional → high. Earlier version: https://web.archive.org/web/20251117094249/https://fortiguard.fortinet.com/psirt/FG-IR-25-910 Later version: https://web.archive.org/web/20251125122621/https://fortiguard.fortinet.com/psirt/FG-IR-25-910 https://daystopatch.com/changes/#cisco-cisco-sa-snmp-x4lphte-202510071711 cisco-cisco-sa-snmp-x4lphte-202510071711 Tue, 07 Oct 2025 17:11:42 GMT Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability. Revision 2.2 date changed from 2025-10-02 to 2025-10-06. Recorded in the revision history. Revision 2.2 date: 2025-10-02 → 2025-10-06. Earlier version: https://web.archive.org/web/20251003142402/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte Later version: https://web.archive.org/web/20251007171142/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte https://daystopatch.com/changes/#cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202507221511 cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202507221511 Tue, 22 Jul 2025 15:11:19 GMT Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities. Advisory now says the bug is exploited (earlier version: vendor not aware). Recorded in the revision history. Exploitation status: vendor not aware of exploitation → vendor aware of exploitation. Earlier version: https://web.archive.org/web/20250716195306/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6 Later version: https://web.archive.org/web/20250722151119/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6 https://daystopatch.com/changes/#fortinet-fg-ir-25-151-202507181021 fortinet-fg-ir-25-151-202507181021 Fri, 18 Jul 2025 10:21:59 GMT Unauthenticated SQL injection in GUI. Advisory now says the bug is exploited. Recorded in the revision history. Exploitation status: not stated → vendor aware of exploitation. Earlier version: https://web.archive.org/web/20250717040705/https://fortiguard.fortinet.com/psirt/FG-IR-25-151 Later version: https://web.archive.org/web/20250718102159/https://fortiguard.fortinet.com/psirt/FG-IR-25-151 https://daystopatch.com/changes/#connectwise-https-www-connectwise-com-company-trust-security-bulletins-s-202504260244 connectwise-https-www-connectwise-com-company-trust-security-bulletins-s-202504260244 Sat, 26 Apr 2025 02:44:36 GMT ScreenConnect 25.2.4 Security Patch. CVSS base vector changed from AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H to AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Changed without a revision note. CVSS vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H → AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Earlier version: https://web.archive.org/web/20250425111520/https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4 Later version: https://web.archive.org/web/20250426024436/https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4 https://daystopatch.com/changes/#sonicwall-https-psirtapi-global-sonicwall-com-api-v1-vulndetail-adviso-202504170725 sonicwall-https-psirtapi-global-sonicwall-com-api-v1-vulndetail-adviso-202504170725 Thu, 17 Apr 2025 07:25:59 GMT created_when: 2021-09-23T21:29:13Z. CVSS base vector changed from AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H to AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (score 5.5 to 7.2). Recorded in the revision history. CVSS vector: AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H → AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. Earlier version: https://web.archive.org/web/20250415020222/https://psirtapi.global.sonicwall.com/api/v1/vulndetail/?advisory_id=SNWLID-2021-0022 Later version: https://web.archive.org/web/20250417072559/https://psirtapi.global.sonicwall.com/api/v1/vulndetail/?advisory_id=SNWLID-2021-0022 https://daystopatch.com/changes/#cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202504061832 cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202504061832 Sun, 06 Apr 2025 18:32:10 GMT Cisco Smart Licensing Utility Vulnerabilities. Advisory now says the bug is exploited (earlier version: vendor not aware). Recorded in the revision history. Exploitation status: vendor not aware of exploitation → vendor aware of exploitation. Earlier version: https://web.archive.org/web/20250315180838/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw Later version: https://web.archive.org/web/20250406183210/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw https://daystopatch.com/changes/#commvault-https-documentation-commvault-com-securityadvisories-cv-2025-202503271345 commvault-https-documentation-commvault-com-securityadvisories-cv-2025-202503271345 Thu, 27 Mar 2025 13:45:11 GMT CV_2025_03_1: Critical Webserver Vulnerability HIGH. Version table: 1 row added and 1 row removed. One new row reads "Commvault | Linux, Windows | 11.32.0 - 11.32.88 | 11.32.89 | Resolved". Recorded in the revision history. Version table rows: Commvault | Linux, Windows | 11.32.0 - 11.32.87 | 11.32.88 | Resolved → Commvault | Linux, Windows | 11.32.0 - 11.32.88 | 11.32.89 | Resolved. Earlier version: https://web.archive.org/web/20250310052046/https://documentation.commvault.com/securityadvisories/CV_2025_03_1.html Later version: https://web.archive.org/web/20250327134511/https://documentation.commvault.com/securityadvisories/CV_2025_03_1.html https://daystopatch.com/changes/#palo-alto-networks-cve-2025-0111-202503100552 palo-alto-networks-cve-2025-0111-202503100552 Mon, 10 Mar 2025 05:52:25 GMT PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface. Version table: 9 rows added and 4 rows removed. One new row reads "PAN-OS 11.2 | = 11.2.4-h4 >= 11.2.5". Recorded in the revision history. Version table rows: PAN-OS 11.2 | = 11.2.4-h4; PAN-OS 11.1 | = 11.1.6-h1; PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.12-h6 >= 10.2.13-h3; PAN-OS 11.2 | 11.2.0 through 11.2.4 | Upgrade to 11.2.4-h4 or later → PAN-OS 11.2 | = 11.2.4-h4 >= 11.2.5; PAN-OS 11.1 | = 11.1.2-h18 >= 11.1.4-h13 >= 11.1.6-h1; PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.10-h14 >= 10.2.11-h12 >= 10.2.12-h6 >= 10.2.13-h3; 10.2.10 | Upgrade to 10.2.10-h14 or 10.2.13-h3 or later. Earlier version: https://web.archive.org/web/20250219095246/https://security.paloaltonetworks.com/CVE-2025-0111 Later version: https://web.archive.org/web/20250310055225/https://security.paloaltonetworks.com/CVE-2025-0111 https://daystopatch.com/changes/#cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202503071847 cisco-https-sec-cloudapps-cisco-com-security-center-content-ciscos-202503071847 Fri, 07 Mar 2025 18:47:01 GMT Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Vulnerabilities. Advisory now says the bug is exploited (earlier version: vendor not aware). Recorded in the revision history. Exploitation status: vendor not aware of exploitation → vendor aware of exploitation. Earlier version: https://web.archive.org/web/20241218124434/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 Later version: https://web.archive.org/web/20250307184701/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 https://daystopatch.com/changes/#palo-alto-networks-cve-2025-0108-202502200940 palo-alto-networks-cve-2025-0108-202502200940 Thu, 20 Feb 2025 09:40:36 GMT PAN-OS: Authentication Bypass in the Management Web Interface. Version table: 5 rows added and 2 rows removed. One new row reads "PAN-OS 11.1 | = 11.1.2-h18 >= 11.1.6-h1". Recorded in the revision history. Version table rows: PAN-OS 11.1 | = 11.1.6-h1; PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.12-h6 >= 10.2.13-h3 → PAN-OS 11.1 | = 11.1.2-h18 >= 11.1.6-h1; PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.10-h14 >= 10.2.11-h12 >= 10.2.12-h6 >= 10.2.13-h3; 10.2.10 | Upgrade to 10.2.10-h14 or 10.2.13-h3 or later; 10.2.11 | Upgrade to 10.2.11-h12 or 10.2.13-h3 or later. Earlier version: https://web.archive.org/web/20250219095115/https://security.paloaltonetworks.com/CVE-2025-0108 Later version: https://web.archive.org/web/20250220094036/https://security.paloaltonetworks.com/CVE-2025-0108 https://daystopatch.com/changes/#palo-alto-networks-cve-2025-0111-202502190952 palo-alto-networks-cve-2025-0111-202502190952 Wed, 19 Feb 2025 09:52:46 GMT PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface. CVSS exploit maturity changed from unreported to attacked (displayed score 4.9 to 7.1). Advisory now says the bug is exploited (earlier version: vendor not aware). Version table: 5 rows added and 1 row removed. One new row reads "PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.12-h6 >= 10.2.13-h3". Recorded in the revision history. CVSS exploit maturity: unreported → attacked; Exploitation status: vendor not aware of exploitation → vendor aware of exploitation; Version table rows: PAN-OS 10.2 | = 10.2.13-h3 → PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.12-h6 >= 10.2.13-h3; 10.2.7 | Upgrade to 10.2.7-h24 or 10.2.13-h3 or later; 10.2.8 | Upgrade to 10.2.8-h21 or 10.2.13-h3 or later; 10.2.9 | Upgrade to 10.2.9-h21 or 10.2.13-h3 or later. Earlier version: https://web.archive.org/web/20250215082757/https://security.paloaltonetworks.com/CVE-2025-0111 Later version: https://web.archive.org/web/20250219095246/https://security.paloaltonetworks.com/CVE-2025-0111 https://daystopatch.com/changes/#palo-alto-networks-cve-2025-0108-202502190951 palo-alto-networks-cve-2025-0108-202502190951 Wed, 19 Feb 2025 09:51:15 GMT PAN-OS: Authentication Bypass in the Management Web Interface. CVSS exploit maturity changed from proof of concept to attacked (displayed score 7.8 to 8.8). Advisory now says the bug is exploited (earlier version: vendor not aware). Version table: 5 rows added and 1 row removed. One new row reads "PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.12-h6 >= 10.2.13-h3". Recorded in the revision history. CVSS exploit maturity: proof of concept → attacked; Exploitation status: vendor not aware of exploitation → vendor aware of exploitation; Version table rows: PAN-OS 10.2 | = 10.2.13-h3 → PAN-OS 10.2 | = 10.2.7-h24 >= 10.2.8-h21 >= 10.2.9-h21 >= 10.2.12-h6 >= 10.2.13-h3; 10.2.7 | Upgrade to 10.2.7-h24 or 10.2.13-h3 or later; 10.2.8 | Upgrade to 10.2.8-h21 or 10.2.13-h3 or later; 10.2.9 | Upgrade to 10.2.9-h21 or 10.2.13-h3 or later. Earlier version: https://web.archive.org/web/20250217151310/https://security.paloaltonetworks.com/CVE-2025-0108 Later version: https://web.archive.org/web/20250219095115/https://security.paloaltonetworks.com/CVE-2025-0108 https://daystopatch.com/changes/#palo-alto-networks-https-security-paloaltonetworks-com-cve-2024-3393-202502040329 palo-alto-networks-https-security-paloaltonetworks-com-cve-2024-3393-202502040329 Tue, 04 Feb 2025 03:29:11 GMT Palo Alto Networks Security Advisories /. Version table: 1 row added and 1 row removed. One new row reads "PAN-OS 11.1 | = 11.1.2-h16 >= 11.1.3-h13 >= 11.1.4-h7 >= 11.1.5". Recorded in the revision history. Version table rows: PAN-OS 11.1 | = 11.1.2-h16 >= 11.1.3-h13 >= 11.1.4-h6 >= 11.1.5 → PAN-OS 11.1 | = 11.1.2-h16 >= 11.1.3-h13 >= 11.1.4-h7 >= 11.1.5. Earlier version: https://web.archive.org/web/20250125085231/https://security.paloaltonetworks.com/CVE-2024-3393 Later version: https://web.archive.org/web/20250204032911/https://security.paloaltonetworks.com/CVE-2024-3393 https://daystopatch.com/changes/#palo-alto-networks-https-security-paloaltonetworks-com-cve-2024-3393-202501250852 palo-alto-networks-https-security-paloaltonetworks-com-cve-2024-3393-202501250852 Sat, 25 Jan 2025 08:52:31 GMT Palo Alto Networks Security Advisories /. Workaround text changed. Recorded in the revision history. Workaround: If your firewall running the vulnerable PAN-OS versions stops responding or reboots unexpectedly and you cannot immediately apply a fix, apply a workaround below based on your deployment. Unmanaged NGFWs, NGFW managed by Panorama, or Prisma Access managed by Panorama Within Objects → Security Profil → If your firewall running the vulnerable PAN-OS versions stops responding or reboots unexpectedly and you cannot immediately apply a fix, apply a workaround below based on your deployment. Unmanaged NGFWs, NGFW managed by Panorama, or Prisma Access managed by Panorama Ensure that a DNS Security Confi. Earlier version: https://web.archive.org/web/20250117210021/https://security.paloaltonetworks.com/CVE-2024-3393 Later version: https://web.archive.org/web/20250125085231/https://security.paloaltonetworks.com/CVE-2024-3393 https://daystopatch.com/changes/#palo-alto-networks-https-security-paloaltonetworks-com-cve-2024-3393-202501031136 palo-alto-networks-https-security-paloaltonetworks-com-cve-2024-3393-202501031136 Fri, 03 Jan 2025 11:36:31 GMT Palo Alto Networks Security Advisories /. Workaround text changed. Recorded in the revision history. Workaround: If your firewall running the vulnerable PAN-OS versions stops responding or reboots unexpectedly and you cannot immediately apply a fix, apply a workaround below based on your deployment. Unmanaged NGFWs, NGFW managed by Panorama, or Prisma Access managed by Panorama For each Anti-spyware profile, n → If your firewall running the vulnerable PAN-OS versions stops responding or reboots unexpectedly and you cannot immediately apply a fix, apply a workaround below based on your deployment. Unmanaged NGFWs, NGFW managed by Panorama, or Prisma Access managed by Panorama Within Objects → Security Profil. Earlier version: https://web.archive.org/web/20241230180307/https://security.paloaltonetworks.com/CVE-2024-3393 Later version: https://web.archive.org/web/20250103113631/https://security.paloaltonetworks.com/CVE-2024-3393 https://daystopatch.com/changes/#palo-alto-networks-pan-sa-2024-0010-202411151211 palo-alto-networks-pan-sa-2024-0010-202411151211 Fri, 15 Nov 2024 12:11:01 GMT Expedition: Multiple Vulnerabilities in Expedition Lead to Exposure of Firewall Credentials. Advisory now says the bug is exploited (earlier version: vendor not aware). Recorded in the revision history. Exploitation status: vendor not aware of exploitation → vendor aware of exploitation. Earlier version: https://web.archive.org/web/20241107171035/https://security.paloaltonetworks.com/PAN-SA-2024-0010 Later version: https://web.archive.org/web/20241115121101/https://security.paloaltonetworks.com/PAN-SA-2024-0010 https://daystopatch.com/changes/#palo-alto-networks-cve-2024-5910-202411082306 palo-alto-networks-cve-2024-5910-202411082306 Fri, 08 Nov 2024 23:06:43 GMT Expedition: Missing Authentication Leads to Admin Account Takeover. Advisory now says the bug is exploited (earlier version: vendor not aware). Recorded in the revision history. Exploitation status: vendor not aware of exploitation → vendor aware of exploitation. Earlier version: https://web.archive.org/web/20240713224014/https://security.paloaltonetworks.com/CVE-2024-5910 Later version: https://web.archive.org/web/20241108230643/https://security.paloaltonetworks.com/CVE-2024-5910 https://daystopatch.com/changes/#atlassian-https-jira-atlassian-com-browse-jraserver-72695-202205232311 atlassian-https-jira-atlassian-com-browse-jraserver-72695-202205232311 Mon, 23 May 2022 23:11:33 GMT Public Security Vulnerability. Workaround text changed. Changed without a revision note. Workaround: Until the upgrade you may use the following workaround to protect the files: https://confluence.atlassian.com/jirakb/workaround-for-cve-2019-15004-979416164.html Attachments Issue Links relates to CONFSERVER-60469 Pre-Authorization Limited Arbitrary File Read in Confluence Server - CVE-2020-29448 Pu → Until the upgrade you may use the following workaround to protect the files: https://confluence.atlassian.com/jirakb/workaround-for-cve-2019-15004-979416164.html Note: Workaround 1 in the above KB article is not valid for this purpose. Workaround 2 (proxy/load balancer configuration) is valid. Attac. Earlier version: https://web.archive.org/web/20211209113700/https://jira.atlassian.com/browse/JRASERVER-72695 Later version: https://web.archive.org/web/20220523231133/https://jira.atlassian.com/browse/JRASERVER-72695 https://daystopatch.com/changes/#atlassian-https-jira-atlassian-com-browse-jraserver-72695-202111301128 atlassian-https-jira-atlassian-com-browse-jraserver-72695-202111301128 Tue, 30 Nov 2021 11:28:21 GMT Public Security Vulnerability. Workaround text added. Changed without a revision note. Workaround: not present → Until the upgrade you may use the following workaround to protect the files: https://confluence.atlassian.com/jirakb/workaround-for-cve-2019-15004-979416164.html Attachments Issue Links relates to CONFSERVER-60469 Pre-Authorization Limited Arbitrary File Read in Confluence Server - CVE-2020-29448 Pu. Earlier version: https://web.archive.org/web/20211028010743/https://jira.atlassian.com/browse/JRASERVER-72695 Later version: https://web.archive.org/web/20211130112821/https://jira.atlassian.com/browse/JRASERVER-72695