Advisories from national CERTs.

Using TLS to protect data

Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.

Post-quantum updates to our TLS guidance

The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.

Critical Vulnerability in Cisco Secure Email Gateway

On 14 October 2026, Cisco published a security advisory addressing a critical vulnerability affecting the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. This vulnerability could allow an…

Multiple vulnerabilities in Palo Alto Networks products Translated from French

Multiple vulnerabilities have been discovered in Palo Alto Networks products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service. Palo Alto…

Multiple vulnerabilities in F5 products Translated from French

Multiple vulnerabilities have been discovered in F5 products. Some of them allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and a breach of data integrity.

Multiple vulnerabilities in Juniper Networks products Translated from French

Multiple vulnerabilities have been discovered in Juniper Networks products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

Vulnerability in Microsoft products Translated from French

A vulnerability has been discovered in Microsoft products. It allows an attacker to cause privilege escalation.

Multiple vulnerabilities in Symfony products Translated from French

Multiple vulnerabilities have been discovered in Symfony products. They allow an attacker to cause remote denial of service.

Multiple vulnerabilities in Moodle Translated from French

Multiple vulnerabilities have been discovered in Moodle. They allow an attacker to cause remote cross-site scripting (XSS) and a security policy bypass.

Multiple vulnerabilities in Drupal Translated from French

Multiple vulnerabilities have been discovered in Drupal. They allow an attacker to cause remote arbitrary code execution and remote cross-site scripting (XSS).

Vulnerability in Cisco AsyncOS Software for Secure Email Gateway Translated from French

A vulnerability has been discovered in Cisco AsyncOS Software for Secure Email Gateway. It allows an attacker to cause remote arbitrary code execution and a breach of data integrity. Cisco reports that vulnerability…

Multiple vulnerabilities in Sonicwall Network Security Manager Translated from French

Multiple vulnerabilities have been discovered in Sonicwall Network Security Manager. They allow an attacker to cause remote arbitrary code execution and a security policy bypass.

Vulnerability in PostgreSQL psqlODBC Translated from French

A vulnerability has been discovered in PostgreSQL psqlODBC. It allows an attacker to cause remote denial of service.

Vercel Next.js: Multiple vulnerabilities Translated from German

Red Hat Enterprise Linux (lrzsz): Multiple vulnerabilities Translated from German

Red Hat Enterprise Linux (libsoup): Multiple vulnerabilities Translated from German

NGINX: Multiple vulnerabilities Translated from German

Drupal Core, Gin Admin Theme and Entity List: Multiple vulnerabilities Translated from German

Linux Kernel: Multiple vulnerabilities Translated from German

Erlang/OTP: Multiple vulnerabilities Translated from German

Synacor Zimbra: Multiple vulnerabilities Translated from German

CUPS: Multiple vulnerabilities Translated from German

Netgate pfSense: Vulnerability allows arbitrary code execution with administrator rights Translated from German

Angular Platform-Server, Router and DevTools: Multiple vulnerabilities allow denial of service Translated from German

ImageMagick: Multiple vulnerabilities allow denial of service Translated from German

OpenSSH: Multiple vulnerabilities Translated from German

Eclipse Jetty: Vulnerability allows data manipulation Translated from German

FreeBSD Project FreeBSD OS: Multiple vulnerabilities Translated from German

PJSIP: Multiple vulnerabilities Translated from German

ESRI ArcGIS: Multiple vulnerabilities Translated from German

Cisco Secure Email Gateway: Vulnerability allows arbitrary code execution with administrator rights Translated from German

Palo Alto Networks GlobalProtect: Multiple vulnerabilities Translated from German

ONLYOFFICE Docs: Vulnerability allows information disclosure Translated from German

7-Zip: Vulnerability allows information disclosure Translated from German

OpenVPN: Vulnerability allows denial of service Translated from German

GStreamer: Multiple vulnerabilities Translated from German

Gitea: Vulnerability allows arbitrary code execution with administrator rights Translated from German

QT: Vulnerability allows denial of service Translated from German

Gogs: Vulnerability allows displaying false information and bypassing security measures Translated from German

ILIAS: Vulnerability allows code execution Translated from German

BusyBox: Multiple vulnerabilities Translated from German

Progress Software MOVEit: Multiple vulnerabilities Translated from German

Znuny: Vulnerability allows bypassing security measures Translated from German

Palo Alto Networks Cortex XSOAR: Vulnerability allows code execution Translated from German

Palo Alto Networks PAN-OS: Multiple vulnerabilities Translated from German

Vulnerability fixed in Cisco Secure Email Gateway Translated from Dutch

Vulnerabilities fixed in Fortinet FortiSandbox Translated from Dutch

Vulnerabilities fixed in Ahsay AhsayCBS Translated from Dutch

Multiple vulnerabilities in Adobe products Translated from French

Multiple vulnerabilities have been discovered in Adobe products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

Multiple vulnerabilities in Xen Translated from French

Multiple vulnerabilities have been discovered in Xen. Some of them allow an attacker to cause arbitrary code execution, privilege escalation and a breach of data confidentiality.