FORTINET: ❗️ Security Advisory: Denial of Service (DoS) Vulnerability in FortiAnalyzer and FortiManager APIs

FORTINET Security Advisory Published Date: May 12, 2026 Advisory Summary A Medium-severity vulnerability (CVSSv3 score 5.2) identified as a use of a potentially dangerous function (CWE-676) impacts FortiAnalyzer and FortiManager products. Authenticated attackers can exploit this flaw by sending multiple specially crafted HTTP requests, potentially causing system hangs and crashes due to unsafe handling of […]

FORTINET: ❗️ Command Injection in FortiAP CLI Interfaces

FORTINET Security Advisory Published Date: May 12, 2026 Advisory Summary Fortinet has disclosed a significant security vulnerability rated 6.1 on the CVSSv3 scale affecting FortiAP models, including FortiAP, FortiAP-U, and FortiAP-W2. This OS Command Injection flaw (CWE-78) resides in the Command Line Interface (CLI) of these devices. It allows an authenticated user with privileged access […]

FORTINET: ❗️ Security Advisory: Arbitrary Log File Read Vulnerability in FortiDeceptor WEB UI

FORTINET Security Advisory Published Date: May 12, 2026 Advisory Summary Fortinet has disclosed a vulnerability rated with a CVSSv3 score of 4.0 involving an Improper Neutralization of Argument Delimiters in a Command, classified as Argument Injection (CWE-88). This issue affects the FortiDeceptor administrative web interface and could allow an authenticated attacker, even with only read-only […]

FORTINET: 📅 Published on May 13, 2026

FORTINET Security Advisory Published Date: May 13, 2026 CVE: CVE-2026-31431 Advisory Summary ⬢ Linux Kernel Vulnerability CVE-2026-31431 Resolved: Key Security Fix for Crypto AEAD Module ⬢ Fortinet has announced the resolution of a significant vulnerability in the Linux kernel’s cryptographic subsystem, identified as CVE-2026-31431, with a CVSSv3 score of 7.8, categorizing it as a high-severity […]

ORACLE: 📅 Published on May 28, 2026

ORACLE Security Advisory Published Date: May 28, 2026 Advisory Summary Oracle has released its May 2026 Critical Security Patch Update (CSPU), addressing multiple high-severity vulnerabilities that could potentially impact enterprise infrastructure and data center systems. This update targets a broad range of Oracle products, including database systems, middleware, and cloud infrastructure solutions. Fixes for critical […]

PALO ALTO: Security Advisory – PAN-OS GlobalProtect Authentication Bypass Vulnerabilities

PALO ALTO Security Advisory Published Date: May 28, 2026 CVE: CVE-2026-0257 Advisory Summary Palo Alto Networks has disclosed CVE-2026-0257, identifying medium-severity authentication bypass vulnerabilities within their PAN-OS GlobalProtect VPN solution. These vulnerabilities could allow unauthorized users to bypass authentication mechanisms, potentially leading to unauthorized access to protected resources within an enterprise network. Security professionals should […]

PALO ALTO: 📅 Published on May 28, 2026

PALO ALTO Security Advisory Published Date: May 28, 2026 CVE: CVE-2026-0265 Advisory Summary 🔔 HIGH SEVERITY ALERT: PAN-OS Authentication Bypass Vulnerability (CVE-2026-0265) Palo Alto Networks has disclosed a critical authentication bypass vulnerability in PAN-OS when the Cloud Authentication Service (CAS) is enabled. This flaw could allow attackers to bypass standard authentication controls, potentially gaining unauthorized […]

PALO ALTO: 📅 Published on May 28, 2026

PALO ALTO Security Advisory Published Date: May 28, 2026 CVE: CVE-2026-0262 Advisory Summary ⬢ ⬢ ⬢ ALERT: Medium Severity DoS Vulnerabilities Identified in PAN-OS ⬢ ⬢ ⬢ Palo Alto Networks has disclosed CVE-2026-0262, a medium severity security vulnerability impacting PAN-OS related to denial of service (DoS) conditions triggered through network traffic parsing. This flaw could […]

PALO ALTO: ◼️ Authenticated Admin Command Injection in PAN-OS (CVE-2026-0261) ◼️

PALO ALTO Security Advisory Published Date: May 28, 2026 CVE: CVE-2026-0261 Advisory Summary Palo Alto Networks has disclosed a medium-severity vulnerability identified as CVE-2026-0261 affecting PAN-OS, their flagship network security operating system. This vulnerability allows an authenticated administrator to perform command injection, which could enable unauthorized command execution within the system. The vulnerability requires administrative […]

PALO ALTO: 📅 Published on May 28, 2026

PALO ALTO Security Advisory Published Date: May 28, 2026 CVE: CVE-2026-0258 Advisory Summary Palo Alto Networks has disclosed a medium-severity security vulnerability identified as CVE-2026-0258 affecting PAN-OS. This issue involves a Server-Side Request Forgery (SSRF) vulnerability within the IKEv2 protocol’s certificate URL fetching mechanism. SSRF vulnerabilities can allow an attacker to force the device to […]