15691 matches found
Cisco Advance Notification for Publication of September 16, 2026, Security Advisories
On September 16, 2026, the Cisco Product Security Incident Response Team PSIRT published the advisories that are listed in the following tables. To remediate these vulnerabilities, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories. For more...
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-25249link is external Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability CVE-2026-19490link is external Citrix NetScaler Authentication...
CVE-2026-70568
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2026-68831
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...
EUVD-2026-73648
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70568
This is a heap-based buffer overflow vulnerability in Windows Defender Firewall Service that allows an authorized attacker to achieve local privilege escalation with high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector wi...
CVE-2026-68831
CVE-2026-68831 is an information disclosure vulnerability in Windows Defender Firewall Service . The issue arises from files or directories accessible to external parties, allowing an authorized attacker with low privileges to disclose information locally (CVSS 3.1 score 5.5 – MEDIUM ; vector AV:...
EUVD-2026-73398
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...
Windows Defender Firewall Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
Windows Defender Firewall Service Information Disclosure Vulnerability
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...
PT-2026-87805
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
PT-2026-87269
Name of the Vulnerable Software and Affected Versions Windows Defender Firewall Service affected versions not specified Description Files or directories accessible to external parties in the Windows Defender Firewall Service allow an authorized attacker to disclose sensitive information locally,...
CVE-2026-70568: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2026-68831: Files or Directories Accessible to External Parties
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...
SafeLine v9.4.1
SafeLine - Make your web apps secure 🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋♂️ Discord | 中文版 👋 INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...
CVE-2026-56128
A flaw was found in pfSense Plus and CE. An authenticated user with the 'Firewall: Schedules: Edit' privilege can inject malicious JavaScript code into the schedule description. This code is stored without proper sanitization and executes in the browser of any user with the 'Firewall: Rules'...
easywall v2.14.0
easywall Your firewall. Your rules. No surprises. Live demo · Documentation · Changelog nftables through a web interface that cannot lock you out: every apply reverts itself unless you confirm it. The idea Editing a rule changes nothing. Applying it changes everything — for 120 seconds. If the ne...
The vulnerability of Fortinet FortiWeb web applications’ network firewalls, related to authentication procedures that allow attackers to bypass existing security restrictions.
The vulnerability of Fortinet FortiWeb network firewalls is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to bypass existing security restrictions remotely...
CVE-2026-67402: Files or Directories Accessible to External Parties
An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerabili...
CVE-2026-67402
An insecure Apache configuration in ConfigServer Security & Firewall (CSF) by WebPros maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host . A remote unauthenticated attacker whose address is blocked by CSF can request a mapped executable and run arbitrary commands as the Apa...