QCS Security Advisory Desk
Security Advisory Desk.
Monitor network-edge vulnerabilities, known exploitation, affected products, mitigations, and vendor patch guidance without waiting for a weekly editorial cycle.
QCS pathSource-to-action path
- 01Official sourceMonitor vendors and trusted authorities.
- 02Verify contextCheck products, exposure, and evidence.
- 03Set prioritySeparate urgent action from useful reading.
- 04Act or learnPatch, mitigate, investigate, or prepare.
Live intelligence
See the items that can change today's patch or mitigation plan.
Priority combines source severity, known exploitation, remote attack conditions, recency, and network-edge relevance.
high
Palo Alto Networks / Priority 94
CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing (Severity: HIGH)
A serious security flaw was found in Palo Alto Networks' PAN-OS software, affecting various firewall products including PA-Series hardware, VM-Series virtual firewalls, and Panorama management. This flaw involves a buffer overflow during XML data processing, which could allow attackers to disrupt services or, on some models, run harmful code with full control without needing any login credentials. Palo Alto Networks has released software updates to fix this issue, and customers are advised to upgrade to these fixed versions promptly for protection.
- Published
- 9 Sep 2026
- CVSS
- Not scored
- Verified
- 16 Sep 2026
high
Palo Alto Networks / Priority 94
CVE-2026-0251 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: HIGH)
A security issue in the Palo Alto Networks GlobalProtect app lets a local user increase their access rights on a computer. This means someone with basic user access could gain full system control if they are on the affected Windows, macOS, or Linux device. The issue does not affect Android, iOS, Chrome OS, or UWP versions of the app. Users should upgrade their GlobalProtect app to the fixed versions to stop this vulnerability from being exploited.
- Published
- 27 Aug 2026
- CVSS
- Not scored
- Verified
- 1 Sep 2026
high
Cisco / Priority 94
Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability
Cisco has confirmed a high-severity vulnerability in the command-line interface of three Catalyst SD-WAN control components. A local attacker who already has netadmin privileges can upload a specially crafted file and gain root control of the affected system. Cisco became aware of exploitation in June 2026 and observed limited cases in which configuration changes were pushed to edge devices. Customers should preserve evidence before upgrading, install a fixed release as soon as possible, and check systems and edge-device configurations for compromise.
- Published
- 21 Jul 2026
- CVSS
- Not scored
- Verified
- 29 Jul 2026
high Exploitation reported
Microsoft / Priority 94
CVE-2026-4450: Chromium: CVE-2026-4450 Out of bounds write in V8
A security vulnerability named CVE-2026-4450 was found in the Chromium browser engine's V8 JavaScript component. This flaw allows an out-of-bounds write, meaning the software might write data outside of allowed memory areas, which can cause crashes or allow attackers to execute harmful code. Microsoft Edge, which is based on Chromium, includes this fix in its version 146.0.3856.72 and later. Users should update Edge to this version or newer to stay protected.
- Published
- 10 Mar 2026
- CVSS
- 8.8
- Verified
- 4 Oct 2026
high Exploitation reported
Fortinet / Priority 87
Fortinet FortiOS CAPWAP Out-of-Bounds Write Vulnerability
Fortinet has fixed a high-severity FortiOS vulnerability in the CAPWAP daemon. In practical terms, an attacker who already controls an authenticated FortiAP, FortiExtender, or FortiSwitch could use that trusted device relationship to gain execution privileges on the connected FortiGate. Internet-wide unauthenticated exploitation is not the scenario described by Fortinet, but environments with managed extension devices should verify versions and trust relationships promptly.
- Published
- 12 May 2026
- CVSS
- 8.3
- Verified
- 3 Aug 2026
medium
Cisco / Priority 82
Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability
A security flaw in Cisco's Application Policy Infrastructure Controller (APIC) allows someone with administrative login details to improperly access sensitive files on the device. This happens because the system does not correctly restrict access to its file system. By entering specially crafted values in certain fields, an attacker can view important files, including keys that could give them full control over the device and connected switches. Cisco has issued updated software to fix this issue, but there are no temporary fixes or workarounds available.
- Published
- 7 Oct 2026
- CVSS
- Not scored
- Verified
- 9 Oct 2026
medium
Cisco / Priority 82
Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability
A security issue was found in Cisco Application Policy Infrastructure Controller (APIC) that could let a hacker with admin login execute any command on the device as the most powerful user (root). The problem is caused by the system not properly checking commands sent through its API. Cisco has released software updates to fix this issue. There are no other temporary fixes available, so upgrading the software is necessary.
- Published
- 7 Oct 2026
- CVSS
- Not scored
- Verified
- 9 Oct 2026
medium
Cisco / Priority 82
Cisco Identity Services Engine Authentication Bypass Vulnerabilities
Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) have several security problems. These problems could let an attacker access or change data, get sensitive information, or force the system to reload security certificates unexpectedly. Cisco has fixed these issues in software updates. There are no temporary fixes that fully solve these problems, so users should update their software to stay safe.
- Published
- 24 Sep 2026
- CVSS
- Not scored
- Verified
- 1 Oct 2026
medium
Cisco / Priority 82
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Object Group Access Control List Bypass Vulnerabilities
Two security weaknesses were found in Cisco Secure Firewall devices that could let remote attackers sneak past access controls without logging in. This happens because of a logic error in how the firewall handles group-based access rules. Attackers could send disallowed traffic through the firewall, reaching protected parts of the network. Cisco has issued software updates to fix these problems. There are no workarounds to safely avoid these flaws except upgrading to the fixed releases.
- Published
- 18 Sep 2026
- CVSS
- Not scored
- Verified
- 19 Sep 2026
medium
Cisco / Priority 82
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability
A weakness in Cisco Secure Firewall ASA and Threat Defense software's handling of DNS over TCP allows attackers to crash the device by sending specially crafted DNS responses. This can cause the firewall to reload, leading to downtime and service interruptions. Attackers must be able to intercept or control DNS responses to exploit this. Cisco has released software updates to fix this issue, but no temporary workarounds exist.
- Published
- 18 Sep 2026
- CVSS
- Not scored
- Verified
- 19 Sep 2026
medium
Palo Alto Networks / Priority 82
CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)
A security weakness in the Windows version of the Palo Alto Networks GlobalProtect app can allow a nearby attacker to take control of the affected device without needing the user to do anything. This issue happens only when the device uses a specific login method called SAML with the Connect Before Logon feature. The problem has been fixed in recent updates of the app, so users should upgrade to those versions to stay secure.
- Published
- 12 Sep 2026
- CVSS
- Not scored
- Verified
- 16 Sep 2026
medium
Cisco / Priority 82
Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities
Cisco Secure Email has weaknesses in its email encryption feature that could let hackers intercept and read encrypted emails without needing to log in. The issue happens because the system doesn't properly check if encrypted messages have been tampered with. Attackers could do this by positioning themselves between email servers and changing the messages as they pass through. There is currently no temporary fix, so users should update their software when a fixed version is available.
- Published
- 8 Sep 2026
- CVSS
- Not scored
- Verified
- 9 Sep 2026