FeedNetwork Security

Verified advisories, vulnerability disclosures, and architectural research.

CVE-2024-21893

CVE-2024-21893: Critical SSRF in Ivanti Connect Secure and Policy Secure SAML Component

Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker to access certain restricted resources without authentication.

Connect Secure, Policy Secure, and Neurons

View Detail

CVE-2026-0300

CVE-2026-0300: Critical Root-Level RCE in Palo Alto Networks PAN-OS Captive Portal

Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Authentication Portal (aka Captive Portal) service that can allow an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.

PAN-OS

View Detail

CVE-2025-24472

CVE-2025-24472: Critical Fortinet FortiOS and FortiProxy Authentication Bypass Advisory

Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.

FortiOS and FortiProxy

View Detail

CVE-2019-6693

Critical Security Advisory: CVE-2019-6693 Fortinet FortiOS Hard-Coded Cryptographic Key Vulnerability

Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key.

FortiOS

View Detail

CVE-2026-35616

Critical Security Advisory: CVE-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability

Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

FortiClient EMS

View Detail