FORTINET: 📅 Publication date: Sep 8, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary ⬛ ⚠️ Title: JWT authentication bypass risk in FortiMonitorOnSight (FortiMonitorOnSight web GUI) 📌 Summary (what’s happening): FortiMonitorOnSight contains a vulnerability related to Sensitive Information in Source Code (CWE-540) where a JWT used for authentication in the web GUI is signed with a static key. This can […]
FORTINET: 📅 Published: September 8, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔶 Improper Authentication of FortiPAM Server — What’s New? Fortinet has disclosed a CWE-287 (Improper Authentication) issue tied to the Fortinet Privileged Access Agent (PAM) Chrome Extension. With a CVSSv3 score of 9.1, the vulnerability could let an unauthenticated remote attacker proxy a user’s browser traffic […]
FORTINET: 🗓️ Calendar—September 8, 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🚨 ALERT Cron Job Injection in Remote Backup (FortiSandbox) CVSS v3: 6.7 (moderate—potentially high impact due to privileged execution) tampering with backup schedules or execution outcomes persistence via job manipulation escalation of impact depending on integration with broader SOC/automation tooling FortiSandbox (PSIRT advisory indicates a specific […]
FORTINET: 🗓️ Published on: 📅 September 8, 2026
FORTINET Security Advisory Published Date: 🗓️ : September 8, 2026 Advisory Summary Title: ⛔ Broken Access control on Websocket streams (FortiSOAR) — Subscribe to WebSocket streams/topics Inject/broadcast messages into the stream via crafted WebSocket requests ✅ CVSSv3: 4.9 (Moderate) Revised: 2026-09-08 — Confidentiality exposure (viewing unauthorized event/stream data) Integrity attacks (sending spoofed or malicious broadcast […]
FORTINET: 🗓️ Published: 08 Sep 2026 (Revised: 08 Sep 2026)
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔔 ⚠️ Arbitrary Process Termination via Exposed Minifilter Port (FortiClient Windows) Summary (for market + security teams): Fortinet reports an unverified ownership vulnerability (CWE-283) in the FortiClient Windows fortimon3 driver. A threat actor who is authenticated could potentially terminate arbitrary processes by leveraging an exposed minifilter […]
DELL: 🗓️ Calendar • 8 September 2026
DELL Security Advisory Published Date: Not specified CVE: CVE-2026-6923 Advisory Summary 🔐 🛡️ DSA-2026-224: Security Update for Dell PowerEdge TPM 2.0 Firmware Vulnerability Dell has released DSA-2026-224 addressing a Trusted Platform Module (TPM) 2.0 firmware vulnerability affecting supported Dell PowerEdge server platforms. The reported severity is Low, but firmware issues involving a root-of-trust component are […]
CISCO: 🗓️ 2026-09-08
CISCO Security Advisory Published Date: Not specified CVE: CVE-2026-20354 Advisory Summary 🔐 ⬤ Cisco Secure Email S/MIME Decryption Flaws (Plaintext Recovery Risk) ⚠️ What’s happeningCisco has disclosed multiple vulnerabilities in the S/MIME decryption functionality of Cisco Secure Email. Due to insufficient message integrity validation, an attacker could use a man-in-the-middle approach to intercept and modify […]
HPE: 📅 Wed, 2 Sep 2026 19:10 (GMT)
HPE Security Advisory Published Date: Not specified Advisory Summary ▲ 🛡️ Multiple Vulnerabilities — HPE Aruba Networking Fabric Composer (HPESBNW05133 rev.1) 🧩 What’s being addressedHPE has released bulletin HPESBNW05133 rev.1 covering multiple security vulnerabilities affecting HPE Aruba Networking Fabric Composer. These issues can impact environments where Fabric Composer is used to simplify and automate network […]
CISCO: 🗓️ Published: 4 September 2026
CISCO Security Advisory Published Date: Not specified CVE: CVE-2026-20274 Advisory Summary 📣 🔐 Cisco IOS XR Software Security Hardening Release (September 2026) Cisco has issued a security hardening update for Cisco IOS XR Software following an internal security review. The release addresses multiple internally discovered vulnerabilities, which Cisco states are not known to be actively […]
HPE: 🗓️📅 September 4, 2026
HPE Security Advisory Published Date: Not specified Advisory Summary 🔶 📌 HPE Telco Network Function Virtual Orchestrator — Multiple Vulnerabilities (HPESBNW05141 rev.1) HPE has released advisory HPESBNW05141 rev.1 covering multiple vulnerabilities in HPE Telco Network Function Virtual Orchestrator. This kind of issue is especially important for service providers because orchestration layers are high-value targets: they […]