Alerts

Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to perform cross-site scripting (XSS), conduct denial-of-service (DoS) attacks, execute arbitrary code or system commands, and escalate privileges to root on the underlying operating system, potentially resulting in full administrative control of the affected device.

Adobe has released security updates to address several vulnerabilities across multiple Adobe products. The addressed vulnerabilities could allow the attacker to conduct cross-site scripting attacks, bypass security restrictions, gain elevated privileges, or execute arbitrary code and gain access to the affected product. Sample of the addressed vulnerabilities: 1. Adobe Commerce Cross-Site Scripting Vulnerability (CVE-2026-21290): CVSS:

Fortinet has released security updates to fix several vulnerabilities across multiple Fortinet products. The addressed vulnerabilities could allow the attacker to bypass authentication mechanisms, perform denial-of-service attacks, execute unauthorized code or commands, gain elevated privileges, obtain sensitive information, bypass firewall and access control policies, or gain unauthorized administrative access to the affected products. Sample of

Mozilla has released an updated Firefox version 148.0.2 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to perform spoofing attacks, bypass security restrictions, perform denial-of-service attacks, execute arbitrary code, and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Mozilla Firefox Memory Safety Bugs Vulnerability (CVE-2026-3847): CVSS: 8.8 Attack

Ivanti has released a security update to fix a vulnerability across Ivanti Desktop and Server Management (DSM) versions 2026.1 and prior. The addressed vulnerability could allow the local authenticated attacker to gain elevated privileges on the affected product. Ivanti Desktop and Server Management Privilege Escalation Vulnerability (CVE- 2026-3483): CVSS: 7.8 Attack Vector: Local Attack Complexity:

Tenable has released security updates to address several vulnerabilities across Nessus Manager and Nessus Agent. The addressed vulnerabilities could allow the attacker to obtain sensitive information, gain elevated privileges, perform denial-of-service attacks, or gain access to the affected products. Sample of addressed vulnerabilities: 1. Nessus Agent Privilege Escalation Vulnerability (CVE-2025-36640): CVSS: 8.8 Attack Vector: Local

VMware has released a security update to fix several vulnerabilities across multiple VMware products. The addressed vulnerabilities could allow the attacker to perform cross-site scripting attacks, gain elevated administrative privileges, execute arbitrary commands, and gain access to the affected system. Sample of addressed vulnerabilities: 1. VMware Aria Operations Command Injection Vulnerability (CVE-2026-22719): CVSS: 8.1 Attack

Microsoft has released a security update to address a vulnerability that affects Microsoft Teams. The addressed vulnerability could allow the remote unauthorized attacker to obtain sensitive information from the affected system. Microsoft Teams Information Disclosure Vulnerability (CVE-2026-21535): CVSS: 8.2 Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Consequences: Obtain Information Vulnerabilities

Splunk has released security updates to fix several vulnerabilities across Splunk Enterprise and Splunk Cloud Platform. The addressed vulnerabilities could allow the attacker to obtain sensitive information from internal Splunk indexes, expose authentication secrets (including SAML configurations, RSA keys, and multi-factor authentication keys), perform client-side denial of service attacks, gain elevated privileges on Windows systems

F5 has released security updates to address several vulnerabilities affecting multiple F5 products. The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, obtain sensitive information, conduct man-in-the-middle attacks, and inject plain-text data into responses sent to clients by an upstream proxied server. Sample of the addressed vulnerabilities: 1. BIG-IP Traffic Management Microkernel TMM