Alerts

Grafana has released security updates to fix several vulnerabilities affecting Grafana, Loki, and Grafana MCP products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, gain elevated privileges, obtain sensitive information, perform server-side request forgery, and cross-site scripting attacks on the affected systems. Sample of the addressed vulnerabilities: 1. Grafana MCP Server-Side Request

Microsoft has released security updates to address vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, perform cross-site scripting attacks, or execute arbitrary code and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Windows Terminal Remote Code Execution Vulnerability (CVE-2026-59117): CVSS:

Cisco has released security updates to address several vulnerabilities across Cisco RoomOS, Cisco ISE, and Cisco ISE-PIC. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, manipulate files, obtain sensitive information, or bypass access controls on the affected systems, potentially leading to full compromise. Sample of addressed vulnerabilities: 1. Cisco RoomOS Improper

F5 has released security updates to address several vulnerabilities affecting multiple F5 products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, manipulate files, obtain sensitive information, or execute arbitrary code on the affected system. Sample of the addressed vulnerabilities: 1. NGINX Ingress Controller Vulnerability (CVE-2026-55723): CVSS: 8.3 Attack Vector: Network Attack

Splunk has released security updates to address several vulnerabilities across Splunk Enterprise and Splunk Cloud Platform. The addressed vulnerabilities could allow the attacker to obtain sensitive information, manipulate files, or bypass security restrictions by performing crosssite request forgery (CSRF) attacks, potentially gaining access to the affected systems. Sample of the addressed vulnerabilities: 1. Splunk Enterprise

Citrix has released a security update to address multiple vulnerabilities affecting Citrix Secure Access Client, Citrix Endpoint Analysis Client for Windows, and XenCenter. The addressed vulnerabilities could allow the attacker to gain elevated privileges or obtain sensitive information on the affected product. Sample of the addressed vulnerabilities: 1. Citrix Endpoint Analysis Client Improper Privilege Management

Fortinet has released a security update to address several vulnerabilities affecting multiple Fortinet products. The addressed vulnerabilities could allow the attackers to obtain sensitive information, gain elevated privileges, or execute unauthorized code or commands on the affected systems. Sample of the addressed vulnerabilities: 1. Fortinet FortiSandbox Unauthenticated VNC Access Vulnerability (CVE-2026-59835): CVSS: 7.7 Attack Vector:

Ivanti has released a security update to fix two vulnerabilities affecting Ivanti Xtraction. The addressed vulnerabilities could allow the remote authenticated attacker to redirect users to arbitrary external URLs or obtain sensitive information from the affected product. Sample of the addressed vulnerabilities: Ivanti Xtraction Path Traversal Vulnerability (CVE-2026-14903): CVSS: 7.7 Attack Vector: Network Attack Complexity:

Linux has released security updates to address several vulnerabilities in the Linux Kernel. The addressed vulnerabilities allow the attacker to gain elevated privileges, manipulate data, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: Linux Kernel’s Real-Time Mutex Vulnerability (CVE-2026-43499): CVSS: 7.8 Attack Vector: Local Attack Complexity: Low Privileges Required: Low

OpenSSH has released security updates to address several vulnerabilities. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, obtain sensitive information, manipulate files, or bypass security restrictions on the affected systems. Sample of the addressed vulnerabilities: 1. OpenSSH Use-After-Free Vulnerability (CVE-2026-60002): CVSS: 7.7 Attack Vector: Network Attack Complexity: High Privileges Required: None User

Juniper Networks has released security updates to address several vulnerabilities affecting Junos OS and Junos OS Evolved. The addressed vulnerabilities could allow the attacker to conduct denial of service attacks, bypass security restrictions, or perform incorrect initialization, which will lead to unauthorized access to the affected system. Sample of the addressed vulnerabilities: 1. Juniper Improper