Vulnerabilities
Vulnerabilities affecting firewalls and security appliances, with vendor fix data, CISA KEV status and EPSS.
Intelligence updated 30 Sept 2026 at 00:17 UTC
259 vulnerabilities
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
Critical9.8CVSS 3.1, Critical20%Cisco Identity Services Engine Authentication Bypass Vulnerability
Critical10CVSS 3.1, Critical14%Cisco Secure Email Gateway SQL Injection Vulnerability
Critical9.8CVSS 3.1, Critical28%Improper Certificate Validation in Quantum Security Gateway
Critical9.8CVSS 3.1, Critical8%- CVE-2026-030113 Aug 2026
PAN-OS: Information Disclosure Vulnerability in URL Filtering
High7.5CVSS 3.1, High0.32% - CVE-2026-7046812 Aug 2026
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, Fort…
High8.1CVSS 3.1, High0.46% - CVE-2026-7140712 Aug 2026
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 m…
High8.1CVSS 3.1, High0.42% Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
High8.6CVSS 3.1, High1%Cisco Secure Firewall Management Center Software Static Credential Vulnerability
Medium5.3CVSS 3.1, Medium35%Authentication Bypass in the SmartConsole Login Process Using an Application Token
Critical9.8CVSS 3.1, Critical78%- CVE-2026-02809 Jul 2026
PAN-OS: IPv6 Firewall Policy Bypass
High7.2CVSS 3.1, High0.34% - CVE-2026-02819 Jul 2026
PAN-OS: Information Disclosure Vulnerability in Management Web Interface
High7.1CVSS 3.1, High0.28% - CVE-2026-02839 Jul 2026
PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)
High7.2CVSS 3.1, High0.38% - CVE-2026-02849 Jul 2026
PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
Critical9.9CVSS 3.1, Critical0.47% - CVE-2026-02869 Jul 2026
PAN-OS: Authenticated Command Injection in CLI
High7.2CVSS 3.1, High2% - CVE-2026-02879 Jul 2026
PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
High7.5CVSS 3.1, High0.62% - CVE-2026-02888 Jul 2026
PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
High7.5CVSS 3.1, High0.83% Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
Medium6.5CVSS 3.1, Medium28%- CVE-2026-027310 Jun 2026
PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI
High7.2CVSS 3.1, High1% - CVE-2026-027210 Jun 2026
PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)
High7.2CVSS 3.1, High0.26% Fortinet FortiSandbox OS Command Injection Vulnerability
Critical9.8CVSS 3.1, Critical76%User Authentication Bypass in VPN Remote Access and Mobile Access
Critical9.3CVSS 3.1, Critical6%Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
High7.8CVSS 3.1, High25%Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
High8.6CVSS 3.1, High88%Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Critical10CVSS 3.1, Critical92%PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
Critical9.1CVSS 3.1, Critical96%- CVE-2026-025813 May 2026
PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching
Critical9.1CVSS 3.1, Critical0.33% - CVE-2026-025913 May 2026
WildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)
High8.8CVSS 3.1, High0.34% - CVE-2026-026113 May 2026
PAN-OS: Authenticated Admin Command Injection Vulnerability
High7.2CVSS 3.1, High1% - CVE-2026-026213 May 2026
PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing
High7.5CVSS 3.1, High0.36%