PALO ALTO: 🗓️ Calendar 12 Aug 2026
PALO ALTO Security Advisory Published Date: Not specified CVE: CVE-2026-0297 Advisory Summary 💡 📌 Title — CVE-2026-0297: GlobalProtect App UDP Tunnel Handshake Buffer Overflow (Severity: MEDIUM) 🛡️ 🔎 What happenedPalo Alto Networks disclosed CVE-2026-0297, a buffer overflow in the GlobalProtect app that can occur during the UDP tunnel handshake process. This affects how the client […]
PALO ALTO: 🗓️ Published: Aug 12, 2026
PALO ALTO Security Advisory Published Date: Not specified CVE: CVE-2026-0292 Advisory Summary 🛡️📌 Title: CVE-2026-0292 Prisma Access Agent (Windows) — Local Security Inspection Bypass (Severity: LOW) A local security inspection bypass issue has been disclosed affecting the Prisma Access Agent on Windows. The reported impact is rated LOW, but the weakness can still matter in […]
PALO ALTO: 🗓️ Calendar • Aug 12, 2026
PALO ALTO Security Advisory Published Date: Not specified CVE: CVE-2026-0293 Advisory Summary 🔎 📌 Prisma Access Agent (Windows) — Anti-Tamper Protection Bypass (CVE-2026-0293) Palo Alto Networks disclosed CVE-2026-0293, a MEDIUM-severity issue affecting the Prisma Access Agent on Windows. The flaw allows an attacker to bypass anti-tamper protections, potentially enabling manipulation of the agent’s behavior or […]
PALO ALTO: 📅 August 12, 2026
PALO ALTO Security Advisory Published Date: Not specified CVE: CVE-2026-0295 Advisory Summary ### 🔎▌CVE-2026-0295 — GlobalProtect App (macOS) Local Privilege Escalation via Race Condition (Severity: MEDIUM) Palo Alto Networks disclosed CVE-2026-0295, a local privilege escalation issue affecting the GlobalProtect app on macOS. The root cause is a race condition, which can allow an attacker with […]
PALO ALTO: 📅 Published: 12 August 2026
PALO ALTO Security Advisory Published Date: Not specified CVE: CVE-2026-0291 Advisory Summary 🧩 🔎 CVE-2026-0291 — Prisma Access Agent (Linux) — Authenticated Limited File Deletion (Severity: LOW) ⚠️ Alarm (What’s happening?) PALO ALTO reports CVE-2026-0291 affecting the Prisma Access Agent on Linux. An authenticated attacker may be able to trigger limited file deletion. The reported […]
CISCO: 📅 August 12, 2026
CISCO Security Advisory Published Date: Not specified Advisory Summary ⬛ 🛡️ Title: Cisco PSIRT “Advance Notification” for Aug 19, 2026 Security Advisories 💡 Information (What’s happening) Cisco PSIRT has issued an advance notice that it will publish new security advisories on August 19, 2026, including fixed software releases for multiple product lines. BroadWorks Industrial Ethernet […]
FORTINET: 🗓️ Calendar • August 12, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🏷️ ⬛ UI DoS attack — FortiOS slow HTTP DoS (unauthenticated) 🔎 What happened / why it matters FortiOS contains an “Allocation of Resources Without Limits or Throttling” weakness (CWE-770, CVSSv3 5.0) that could let an unauthenticated attacker trigger a slow HTTP Denial of Service against […]
FORTINET: 🗓️ Calendar • 12 Aug 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔔 ▲ Security Alert: Stack Buffer Overflow in FortiOS WAD (Explicit Proxy) 🧩 What’s happeningA stack-based buffer overflow (CWE-121) has been reported in FortiOS explicit proxy, affecting the WAD daemon. Under specific conditions, an attacker may be able to achieve remote code/command execution in the context […]
FORTINET: 📅 Aug 12, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔎 🧩 SSRF in FortiSIEM GUI (CWE-918) — Risk to internal reachabilityFortiSIEM GUI contains a Server-Side Request Forgery (SSRF) vulnerability (CVSSv3 3.4) that may allow an authenticated attacker to trigger the FortiSIEM server to make HTTP requests using specially crafted requests. Internal pivoting potential: SSRF can […]
FORTINET: 🗓️ Calendar: August 12, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary ⬛ Title: ◆ Heap overflow (kernel driver) — missing size validation 🔎 Summary (for market professionals): FortiClient for Windows contains a buffer copy flaw where input size is not properly validated (CWE-120). The issue can enable an unauthenticated attacker to craft or alter DNS responses toward […]