Security

CVE detail from Microsoft's public MSRC CVRF API, cross-checked with CISA's Known Exploited Vulnerabilities catalog. Counts cover Microsoft-issued CVEs; republished third-party CVEs such as Chromium or Linux are hidden unless you include them.

Security Update Guide CISA KEV

Security news

All

Tue 15 Sep1 item

Jira Service Management Data Center: Improper Authorization (CVE-2026-21587)

Security advisoryCVE-2026-21587Atlassian Atlassian security advisoriesCVE-2026-21587

Mon 14 Sep1 item

Public Preview: Multi-account support for Microsoft Sentinel codeless connectors

Sentinel Microsoft Sentinel Blog

Sat 12 Sep5 items

CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0295

CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0296

CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0297

CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0298

CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0299

Thu 10 Sep4 items

Protecting organizations from AI-assisted executive impersonation and invoice fraud

Security Microsoft Security Blog

Detect and disrupt AI-themed attacks with Microsoft Defender

Security Microsoft Security Blog

Edge 153.0.4234.32: Chromium security fixes

Security advisory153.0.4234.32Microsoft Edge Microsoft Edge security release notes

GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8

Security advisory19.3.2GitLab GitLab patch releases

Wed 9 Sep10 items

Threat matrix: Mapping threats across cloud web applications

Security Microsoft Security Blog

CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability (Severity: LOW)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0302

CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File (Severity: LOW)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0303

CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability (Severity: MEDIUM)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0304

CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux (Severity: MEDIUM)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0305

CVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows (Severity: MEDIUM)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0306

CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0308

CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (Severity: MEDIUM)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0309

CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing (Severity: HIGH)

Palo Alto Networks Palo Alto Networks security advisoriesCVE-2026-0310

PAN-SA-2026-0012 Chromium: Monthly Vulnerability Update (September 2026) (Severity: HIGH)

Palo Alto Networks Palo Alto Networks security advisories

Tue 8 Sep9 items

Uncontrolled Resource Consumption in SNMP

Security advisoryFG-IR-26-172Fortinet Fortinet PSIRT advisories

Arbitrary process termination from exposed minifilter communication port

Security advisoryFG-IR-26-165Fortinet Fortinet PSIRT advisories

Workflow session email approval process bypass

Security advisoryFG-IR-26-171Fortinet Fortinet PSIRT advisories

FortiMonitorOnSight: JWT used for authentication in web GUI signed with static key

Security advisoryFG-IR-26-170Fortinet Fortinet PSIRT advisories

Null Pointer Dereference in Log Report

Security advisoryFG-IR-26-173Fortinet Fortinet PSIRT advisories

ZTNA Portal Improper Certificate Validation

Security advisoryFG-IR-26-174Fortinet Fortinet PSIRT advisories

FortiSandbox: Cron Job Injection in Remote Backup

Security advisoryFG-IR-26-167Fortinet Fortinet PSIRT advisories

FortiSandbox: Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information

Security advisoryFG-IR-26-166Fortinet Fortinet PSIRT advisories

FortiSOAR: Broken Access control on Websocket streams

Security advisoryFG-IR-26-164Fortinet Fortinet PSIRT advisories