CISCO: 🗓️ Calendar • 8 September 2026
CISCO Security Advisory Published Date: Not specified CVE: CVE-2026-20293 Advisory Summary 🌐 🔍 Cisco UCS & UCS-Based Appliances: UEFI Shell Secure Boot Bypass (High Severity) ⚠️ What happenedCisco has disclosed a High impact vulnerability in the UEFI Shell implementation on Cisco UCS Servers and UCS-based appliances. It could allow an attacker to bypass UEFI Secure […]
CISCO: 🔗 Reference: Reference: Cisco Security Advisory (IOS XR Software Security Hardening Release – September 2026)
CISCO Security Advisory Published Date: Not specified CVE: CVE-2026-20274 Advisory Summary 📅 Calendar Symbol September 08, 2026 ⬛ 🔐 Cisco IOS XR Software Security Hardening Release (September 2026) Cisco has published a critical software hardening update for IOS XR after an internal security review identified multiple issues (tracked under a CWE-703 grouping: improper handling/checking of […]
HPE: 📅 Mon, 8 Sep 2026, 20:00 (GMT+2)
HPE Security Advisory Published Date: Not specified Advisory Summary 🛡️ 🔔 Security Bulletin Summary: HPESBHF05102 rev.1 (Intel SA-01427)HPE has released HPESBHF05102 rev.1 addressing multiple vulnerabilities affecting a broad set of HPE infrastructure platforms that use certain Intel processors and Intel chipset firmware components. The bulletin references INTEL-SA-01427 and includes guidance for HPE systems spanning: ◆ […]
HPE: 📅 September 9, 2026
HPE Security Advisory Published Date: Not specified Advisory Summary 🔔 🛡️ HPE Networking Advanced Notification (Sept 15, 2026) — What Market Pros Should Do Now HPE has issued HPESBNW05126 rev.1 as an advance notice that additional Security Advisories for HPE Networking will be published on September 15, 2026. This is a forward-looking bulletin intended to […]
FORTINET: 🗓️ Calendar • 08 Sep 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🛡️🔎 ⚠️ ZTNA Portal Improper Certificate Validation (CWE-295) Fortinet has highlighted a CWE-295 improper certificate validation vulnerability affecting FortiOS and the FortiProxy Agentless ZTNA portal. The issue is rated CVSSv3: 7.3, and—critically—may enable a remote, unauthenticated attacker to execute a Man-in-the-Middle (MITM) attack on the communication […]
FORTINET: 🗓️ Calendar: 08 September 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🚨 ⚠️ Workflow session email approval process bypass — FortiManager (CWE-284) Fortinet reports an improper access control vulnerability (CWE-284) in FortiManager that could let an administrator bypass the approval process for workflow sessions by using crafted HTTP/HTTPS requests. The reported CVSSv3 score is 4.7, indicating moderate […]
FORTINET: 🗓️ Calendar SymboI • 8 Sep 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🛑 ⚠️ Uncontrolled Resource Consumption in SNMP (FortiAnalyzer SNMP daemon) Fortinet has reported a CWE-457 (Use of Uninitialized Variable) issue in the FortiAnalyzer SNMP daemon. A remote, authenticated attacker (with user permission) may trigger a denial of service by abusing SNMP GETBULK requests, leading to uncontrolled […]
FORTINET: 🗓️ 08 Sep 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔔 ⚠️ Unauthenticated Control of NAT Rules — Sensitive Data Exposure (CVSS 8.9) FortiSandbox / FortiSandbox Cloud / FortiSandbox PaaS WEB UI are affected by an improper access control issue (CWE-284). A vulnerability allows an unauthenticated attacker to use crafted HTTP requests to access sensitive information, […]
FORTINET: 🗓️ Calendar • Tue, 08 Sep 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary 🔔 🛑 Open Redirect Weakness in FortiSIEM (CWE-601) FortiSIEM is reported to have an open redirect vulnerability (CVSSv3 2.8) where an authenticated attacker can craft HTTP requests to redirect users to any untrusted website. Phishing enablement: Redirects can be used to land analysts/operators on lookalike login […]
FORTINET: 🗓️ Calendar 09 Sep 2026
FORTINET Security Advisory Published Date: Not specified Advisory Summary Impact: Denial of service (service disruption) for the affected HTTPS service, potentially affecting admin access, web-based portals, and log/report availability depending on deployment. Severity Signal: CVSSv3 2.5 (low), but exploitation requires authentication—making it especially relevant for environments where attacker access is realistic (e.g., compromised accounts, insider […]