PT-2026-89493

OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data. The vulnerability affects versions of the...

CVE-2026-65638: Improper Neutralization of Special Elements used in an OS Command

Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection. The vulnerability affects versions of the software originally distributed by ConfigServer, as well...

CVE-2026-65639: Improper Neutralization of Special Elements used in an OS Command

OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data. The vulnerability affects versions of the...

PT-2026-89492

Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection. The vulnerability affects versions of the software originally distributed by ConfigServer, as well...

Cisco Advance Notification for Publication of September 16, 2026, Security Advisories

On September 16, 2026, the Cisco Product Security Incident Response Team PSIRT published the advisories that are listed in the following tables. To remediate these vulnerabilities, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories. For more...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-25249link is external Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability CVE-2026-19490link is external Citrix NetScaler Authentication...

CVE-2026-70568

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68831

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...

CVE-2026-70568

This is a heap-based buffer overflow vulnerability in Windows Defender Firewall Service that allows an authorized attacker to achieve local privilege escalation with high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector wi...

EUVD-2026-73648

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73398

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...

CVE-2026-68831

CVE-2026-68831 is an information disclosure vulnerability in Windows Defender Firewall Service . The issue arises from files or directories accessible to external parties, allowing an authorized attacker with low privileges to disclose information locally (CVSS 3.1 score 5.5 – MEDIUM ; vector AV:...

Windows Defender Firewall Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

Windows Defender Firewall Service Information Disclosure Vulnerability

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...

PT-2026-87269

Name of the Vulnerable Software and Affected Versions Windows Defender Firewall Service affected versions not specified Description Files or directories accessible to external parties in the Windows Defender Firewall Service allow an authorized attacker to disclose sensitive information locally,...

CVE-2026-70568: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

PT-2026-87805

Name of the Vulnerable Software and Affected Versions Windows Defender Firewall Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Defender Firewall Service. This issue allows an authorized attacker to elevate privileges locally on the system. A...

CVE-2026-68831: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...

SafeLine v9.4.1

SafeLine - Make your web apps secure 🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋‍♂️ Discord | 中文版 👋 INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...

CVE-2026-56128

A flaw was found in pfSense Plus and CE. An authenticated user with the 'Firewall: Schedules: Edit' privilege can inject malicious JavaScript code into the schedule description. This code is stored without proper sanitization and executes in the browser of any user with the 'Firewall: Rules'...