EUVD-2026-101388

A Stack-based Buffer Overflow vulnerability in the phone-home daemon phcd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to execute arbitrary code as root via a crafted DHCP SZTP bootstrap message. This issue only affects platforms that support...

EUVD-2026-101335

A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos OS and Junos OS Evolved allows an unauthenticated adjacent network attacker to execute code as root or cause a denial of service via an EAPOL frame sent to an 802.1X-authenticated interface...

CVE-2026-102015 Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used

A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos OS and Junos OS Evolved allows an unauthenticated adjacent network attacker to execute code as root or cause a denial of service via an EAPOL frame sent to an 802.1X-authenticated interface...

CVE-2026-102015 Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used

A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos OS and Junos OS Evolved allows an unauthenticated adjacent network attacker to execute code as root or cause a denial of service via an EAPOL frame sent to an 802.1X-authenticated interface...

CVE-2026-102015

A Heap-based Buffer Overflow vulnerability exists in the secure-dot1xd process of Juniper Networks running Junos OS and Junos OS Evolved . An unauthenticated adjacent network attacker can exploit this by sending a malicious EAPOL frame to an 802.1X-authenticated interface. Successful exploitation...

CVE-2026-101950 Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled

A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured f...

EUVD-2026-101471

A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured f...

CVE-2026-101950

A Heap-based Buffer Overflow vulnerability exists in the SVR component of Juniper Networks Junos OS on SRX Series devices. An unauthenticated network attacker can exploit this by sending malformed IPv4 packets to an interface configured for Secure Vector Routing , leading to a denial of service a...

EUVD-2026-101420

A vulnerability in the Advanced Malware Protection AMP feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation...

CVE-2026-76519

Cisco Secure Email Gateway is vulnerable to a relative path traversal flaw in its Advanced Malware Protection (AMP) feature. When the file reputation service is enabled, an unauthenticated remote attacker can send an email with a crafted attachment to write arbitrary files on the underlying opera...

CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability

A vulnerability in the Advanced Malware Protection AMP feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation...

CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability

A vulnerability in the Advanced Malware Protection AMP feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation...

Cisco Advance Notification for Publication of October 21, 2026, Security Advisories

On October 21, 2026, the Cisco Product Security Incident Response Team PSIRT published the following advisories. To remediate the vulnerabilities that were disclosed on October 21, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories. Fo...

Ivanti Connect Secure software supply chain issue vulnerabilities

The Ivanti Connect Secure version 22.8R2.4 has a software supply chain vulnerability. This vulnerability stems from the improper handling of trust in DSCache configuration data by the dsinvoked broker, which may lead to permission escalation to root access...

Cisco Secure Email Gateway Arbitrary File Write Vulnerability

A vulnerability in the Advanced Malware Protection AMP feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation...

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure ICS appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability. The security flaw,...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CVE-2026-10513...

CVE-2026-76519: Relative Path Traversal

A vulnerability in the Advanced Malware Protection AMP feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation...

VulnCheck KEV: CVE-2026-76519

Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system...

PT-2026-114331

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.9.0 Discourse versions prior to 2026.8.1 Discourse versions prior to 2026.7.3 Discourse versions prior to 2026.1.9 Description Sites with secure uploads enabled fail to reconcile upload security metadata when a...