FORTINET: 🗓️ 08 Sep 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔔 ⚠️ Unauthenticated Control of NAT Rules — Sensitive Data Exposure (CVSS 8.9) FortiSandbox / FortiSandbox Cloud / FortiSandbox PaaS WEB UI are affected by an improper access control issue (CWE-284). A vulnerability allows an unauthenticated attacker to use crafted HTTP requests to access sensitive information, […]
FORTINET: 🗓️ Calendar • Tue, 08 Sep 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔔 🛑 Open Redirect Weakness in FortiSIEM (CWE-601) FortiSIEM is reported to have an open redirect vulnerability (CVSSv3 2.8) where an authenticated attacker can craft HTTP requests to redirect users to any untrusted website. Phishing enablement: Redirects can be used to land analysts/operators on lookalike login […]
FORTINET: 🗓️ Calendar 09 Sep 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary Impact: Denial of service (service disruption) for the affected HTTPS service, potentially affecting admin access, web-based portals, and log/report availability depending on deployment. Severity Signal: CVSSv3 2.5 (low), but exploitation requires authentication—making it especially relevant for environments where attacker access is realistic (e.g., compromised accounts, insider […]
FORTINET: 📅 Publication date: Sep 8, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary ⬛ ⚠️ Title: JWT authentication bypass risk in FortiMonitorOnSight (FortiMonitorOnSight web GUI) 📌 Summary (what’s happening): FortiMonitorOnSight contains a vulnerability related to Sensitive Information in Source Code (CWE-540) where a JWT used for authentication in the web GUI is signed with a static key. This can […]
FORTINET: 📅 Published: September 8, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔶 Improper Authentication of FortiPAM Server — What’s New? Fortinet has disclosed a CWE-287 (Improper Authentication) issue tied to the Fortinet Privileged Access Agent (PAM) Chrome Extension. With a CVSSv3 score of 9.1, the vulnerability could let an unauthenticated remote attacker proxy a user’s browser traffic […]
FORTINET: 🗓️ Calendar—September 8, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🚨 ALERT Cron Job Injection in Remote Backup (FortiSandbox) CVSS v3: 6.7 (moderate—potentially high impact due to privileged execution) tampering with backup schedules or execution outcomes persistence via job manipulation escalation of impact depending on integration with broader SOC/automation tooling FortiSandbox (PSIRT advisory indicates a specific […]
FORTINET: 🗓️ Published on: 📅 September 8, 2026
FORTINET Security Advisory Published Date: 🗓️ : September 8, 2026 Advisory Summary Title: ⛔ Broken Access control on Websocket streams (FortiSOAR) — Subscribe to WebSocket streams/topics Inject/broadcast messages into the stream via crafted WebSocket requests ✅ CVSSv3: 4.9 (Moderate) Revised: 2026-09-08 — Confidentiality exposure (viewing unauthorized event/stream data) Integrity attacks (sending spoofed or malicious broadcast […]
FORTINET: 🗓️ Published: 08 Sep 2026 (Revised: 08 Sep 2026)
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔔 ⚠️ Arbitrary Process Termination via Exposed Minifilter Port (FortiClient Windows) Summary (for market + security teams): Fortinet reports an unverified ownership vulnerability (CWE-283) in the FortiClient Windows fortimon3 driver. A threat actor who is authenticated could potentially terminate arbitrary processes by leveraging an exposed minifilter […]
DELL: 🗓️ Calendar • 8 September 2026
DELL Security Advisory Published Date: Not specified CVE: CVE-2026-6923 Advisory Summary 🔐 🛡️ DSA-2026-224: Security Update for Dell PowerEdge TPM 2.0 Firmware Vulnerability Dell has released DSA-2026-224 addressing a Trusted Platform Module (TPM) 2.0 firmware vulnerability affecting supported Dell PowerEdge server platforms. The reported severity is Low, but firmware issues involving a root-of-trust component are […]
CISCO: 🗓️ 2026-09-08
CISCO Security Advisory Published Date: Not specified CVE: CVE-2026-20354 Advisory Summary 🔐 ⬤ Cisco Secure Email S/MIME Decryption Flaws (Plaintext Recovery Risk) ⚠️ What’s happeningCisco has disclosed multiple vulnerabilities in the S/MIME decryption functionality of Cisco Secure Email. Due to insufficient message integrity validation, an attacker could use a man-in-the-middle approach to intercept and modify […]