QCS Security Advisory Desk
Security Advisory Desk.
Monitor network-edge vulnerabilities, known exploitation, affected products, mitigations, and vendor patch guidance without waiting for a weekly editorial cycle.
QCS pathSource-to-action path
- 01Official sourceMonitor vendors and trusted authorities.
- 02Verify contextCheck products, exposure, and evidence.
- 03Set prioritySeparate urgent action from useful reading.
- 04Act or learnPatch, mitigate, investigate, or prepare.
Live intelligence
See the items that can change today's patch or mitigation plan.
Priority combines source severity, known exploitation, remote attack conditions, recency, and network-edge relevance.
medium
Palo Alto Networks / Priority 76
CVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
A security flaw in the GlobalProtect App allows a local user on Windows, macOS, or Linux systems to increase their access rights to full administrative privileges. This means someone with limited access could run commands as if they were an administrator, which poses a medium-level security risk. The issue does not affect iOS, Android, or ChromeOS versions of the app. Palo Alto Networks has released updated versions to address this vulnerability and advises users to upgrade both the GlobalProtect app and PAN-OS to fully fix the problem.
- Published
- 30 Sep 2026
- CVSS
- Not scored
- Verified
- 5 Oct 2026
medium
Palo Alto Networks / Priority 76
CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)
A security flaw in the GlobalProtect VPN app for macOS allows a local attacker to gain higher system privileges, potentially giving them full control of the computer. This happens due to a timing flaw (race condition) in the software. Users should update to the latest fixed versions as soon as possible to prevent this.
- Published
- 12 Sep 2026
- CVSS
- Not scored
- Verified
- 16 Sep 2026
medium Exploitation reported
Palo Alto Networks / Priority 76
CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM)
A vulnerability in the Palo Alto Networks GlobalProtect app's certificate checking lets attackers intercept and alter communications on some computer systems. This weakness does not affect the iOS, Android, or Chrome OS versions, nor does it impact VPN tunnel traffic. Upgrading the app to the fixed versions eliminates the risk.
- Published
- 12 Sep 2026
- CVSS
- Not scored
- Verified
- 16 Sep 2026
medium
Palo Alto Networks / Priority 76
CVE-2026-0297 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (Severity: MEDIUM)
A security flaw was found in the Palo Alto Networks GlobalProtect app. This flaw is a buffer overflow that happens during a UDP tunnel handshake, which could let attackers disrupt the app or run harmful code with high-level system access on Windows, macOS, or Linux. No special settings are needed for the flaw to be present. Palo Alto Networks has released updated app versions to address this issue and provides mitigation steps if immediate updates are not possible.
- Published
- 12 Sep 2026
- CVSS
- Not scored
- Verified
- 16 Sep 2026
medium
Palo Alto Networks / Priority 76
CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)
A security weakness in Palo Alto Networks' GlobalProtect app lets a local user gain administrator-level control on Windows, macOS, and Linux systems. This means someone with limited access can run commands as if they were an administrator, potentially putting your system at risk. Mobile versions of the app are not affected. Updating to the latest versions provided by Palo Alto Networks removes this risk.
- Published
- 12 Sep 2026
- CVSS
- Not scored
- Verified
- 16 Sep 2026
medium
Cisco / Priority 76
Cisco Unified Intelligence Center SQL Injection Vulnerability
A security weakness was found in the web management interface of Cisco Unified Intelligence Center. An attacker who already has authorized access could exploit this flaw to run hidden database commands and see sensitive data stored inside the device. Cisco has released updates to fix this issue, and there are no other workarounds to prevent this risk.
- Published
- 19 Aug 2026
- CVSS
- Not scored
- Verified
- 19 Aug 2026
medium Exploitation reported
Microsoft / Priority 76
CVE-2026-68409: wifi: mac80211: defer link RX stats percpu free to RCU
A vulnerability in the Wi-Fi handling code of the Azure Linux 3.0 kernel could cause unsafe memory access. This issue relates to how some network data statistics are freed in the system, potentially affecting system stability or security. Users of Azure Linux 3.0 should check Microsoft's update guide to determine if they need to update or take other security measures.
- Published
- 11 Aug 2026
- CVSS
- 4.8
- Verified
- 11 Sep 2026
medium
Microsoft / Priority 76
CVE-2026-37236: grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method is rewritten to an arbitrary attacker-supplied value before routing. This allows bypassing method-based access controls enforced by upstream proxies or WAFs.
A security issue in grpc-gateway version 2.28.0 allows attackers to bypass method-based access controls by manipulating a special HTTP header. This happens because the application does not limit which HTTP methods can be set via this header, potentially letting attackers use methods not allowed by upstream protections.
- Published
- 11 Aug 2026
- CVSS
- 5.3
- Verified
- 11 Sep 2026
medium
Cisco / Priority 76
Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability
A flaw in Cisco RoomOS's logging system can let someone with local access and low-level privileges see sensitive data, like login details, by turning on detailed logging and reading the logs. Cisco has fixed this issue with software updates. There are no ways to work around the problem without updating the software.
- Published
- 5 Aug 2026
- CVSS
- Not scored
- Verified
- 6 Aug 2026
medium Exploitation reported
Microsoft / Priority 76
CVE-2026-4948: Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
A security issue affects firewalld, a firewall management tool used in some Microsoft-supported Linux distributions, where a local unprivileged user can improperly change the firewall state due to incorrect authorization handling in a system communication interface called d-bus. This can allow unauthorized changes to firewall settings, potentially impacting system security. Microsoft recommends checking their Security Update Guide to see if your system is affected and to apply updates accordingly.
- Published
- 10 Mar 2026
- CVSS
- 5.5
- Verified
- 4 Oct 2026
medium
Microsoft / Priority 76
CVE-2026-3784: wrong proxy connection reuse with credentials
A vulnerability in some Microsoft-distributed curl versions for Azure Linux and CBL-Mariner allows incorrect reuse of proxy connections with credentials. This may expose sensitive authentication data. Users should review Microsoft's security guide to see if their systems are affected and update accordingly.
- Published
- 10 Mar 2026
- CVSS
- 6.5
- Verified
- 4 Oct 2026
unrated Exploitation reported
Amazon Web Services / Priority 76
CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category
A security issue was found in AWS Amplify API's GraphQL query resolvers, where they did not properly check if a user was allowed to see certain data. This flaw could let an authenticated user access data owned by other users in the same application by crafting special queries. AWS has fixed this problem in newer software versions and advises users to upgrade.
- Published
- 9 Oct 2026
- CVSS
- Not scored
- Verified
- 10 Oct 2026