Patch advisories
Microsoft's monthly release, other vendors' known-exploited CVEs, Linux distribution advisories, vendor bulletins and Microsoft lifecycle dates. CVEs use the same EVRS scale as the Priority Feed.
Vendor bulletins
84 from Apple, Chrome, Cisco, Ivanti, OracleThe Adobe feed did not respond at the last check. Other sources loaded.
| Bulletin | Source | Type | CVEs | Published |
|---|---|---|---|---|
| cisco-sa-php-october26-Jj384DaqVulnerabilities in PHP Affecting Cisco Products: October 2026 | Cisco | Critical | Not listed | 2026-10-21 |
| cisco-sa-hardening-snort3-ybgmhTQeMultiple Cisco Products Snort 3 Security Hardening Release: October 2026 | Cisco | Critical | 2026-10-21 | |
| cisco-sa-snort3-vba-bufdos-jAuFdvn9Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability | Cisco | Medium | 1 CVE: CVE-2026-20218 | 2026-10-21 |
| cisco-sa-vcs-static-cred-hr7EWZ8tCisco Expressway Series Remote Code Execution Vulnerability | Cisco | Critical | 1 CVE: CVE-2026-76466 | 2026-10-21 |
| cisco-sa-voice-hardening-twgbH9e3Cisco Unified Communications Products Security Hardening Release: October 2026 | Cisco | Critical | 2026-10-21 | |
| cisco-sa-asr9k-tUyxcyXNCisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability | Cisco | High | 1 CVE: CVE-2026-76505 | 2026-10-21 |
| cisco-sa-cucm-access-PW9e8Jt2Cisco Unified Communications Manager Improper Access Control Vulnerability | Cisco | Medium | 1 CVE: CVE-2026-76487 | 2026-10-21 |
| cisco-sa-exwy-hardening-FhcqBVcsCisco Expressway Series Security Hardening Release: October 2026 | Cisco | High | 2026-10-21 | |
| cisco-sa-opensrc-snort3-2fXGJPfeOpen Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability | Cisco | High | 1 CVE: CVE-2026-76524 | 2026-10-21 |
| cisco-sa-snort3-gre-JNpMHrTvMultiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability | Cisco | Medium | 1 CVE: CVE-2026-20221 | 2026-10-21 |
| cisco-sa-sec-client-priv-esc-muF8eZdmCisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability | Cisco | High | 1 CVE: CVE-2026-76462 | 2026-10-21 |
| cisco-sa-snort3-gtpcodec-dos-RmecfepzMultiple Cisco Products Snort 3 Denial of Service Vulnerability | Cisco | Medium | 1 CVE: CVE-2026-76445 | 2026-10-21 |
| cisco-sa-expressway-inf-disc-vvYqgSTSCisco Expressway Series Information Disclosure Vulnerability | Cisco | Medium | 1 CVE: CVE-2026-76435 | 2026-10-21 |
| cisco-sa-snort3-mime-vulns-bkXjcKktMultiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability | Cisco | Medium | 1 CVE: CVE-2026-20011 | 2026-10-21 |
| cisco-sa-snort3-misc-dos-6mB22qAKMultiple Cisco Products Snort 3 Denial of Service Vulnerabilities | Cisco | Medium | 2026-10-21 | |
| cisco-sa-notice-QGwHnJ6kCisco Advance Notification for Publication of October 21, 2026, Security Advisories | Cisco | Informational | Not listed | 2026-10-14 |
| cisco-sa-esa-afw-zqYJkjxpCisco Secure Email Gateway Arbitrary File Write Vulnerability | Cisco | Critical | 1 CVE: CVE-2026-76519 | 2026-10-14 |
| cisco-sa-hardening-meraki-os-drbEX9GHCisco Meraki Security Hardening Release: October 2026 | Cisco | Critical | 2026-10-07 | |
| cisco-sa-hardening-esa-dfCrfXkmCisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 | Cisco | Critical | 2026-09-14 | |
| cisco-sa-cuic-sql-inject-2qbfWSm5Cisco Unified Intelligence Center SQL Injection Vulnerability | Cisco | Medium | 1 CVE: CVE-2026-20327 | 2026-08-19 |
CISA KEV, FIRST EPSS, Microsoft Security Update Guide, endoflife.date, Debian, Red Hat, Ubuntu, Adobe, Apple, Chrome, Cisco, Ivanti and Oracle. Each row links to its own advisory.
Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms. Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date.