Topic

Network Security: news, advisories and analysis

8 articlesUpdated 18 Oct 2026

CyberSecureToday covers Network Security across 8 articles published between 3 Sep 2026 and 18 Oct 2026. The coverage includes 8 vulnerability advisories. 8 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Network Security most often intersect with Firewall Security, Active Exploitation and CWE-416, with Technology, Cloud & SaaS the most affected sector. The most recent story, “libcurl HTTP/2 Streaming Upload Use-After-Free Flaw Exposes Client Applications to Memory Corruption”, was published 18 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
libcurl HTTP/2 Streaming Upload Use-After-Free Flaw Exposes Client Applications to Memory Corruption
A heap use-after-free defect in libcurl's HTTP/2 streaming upload engine enabled memory corruption when paused streams were aborted or reset.
Priya Raman18 Oct 202615 min read
ThreatsCloud & SaaSCritical
ESnet iperf3 Server Watchdog Race Condition Enables Remote Heap Use-After-Free Exploitation (CVE-2026-101276)
A critical heap use-after-free vulnerability in ESnet iperf3 v3.21 allows unauthenticated remote attackers to crash network test daemons or execute code.
Priya Raman1 Oct 202611 min read
ThreatsCloud & SaaSHigh
Palo Alto Networks PAN-OS XML Flaw Allows Remote Code Execution on Firewalls
Palo Alto Networks resolves a critical buffer overflow in PAN-OS XML parsing (CVE-2026-0310) allowing unauthenticated attackers to execute root code.
CST Editorial Desk30 Sep 20269 min read
ThreatsCloud & SaaSCritical
Check Point Security Management Buffer Overflow Flaw Enables Unauthenticated Remote Root Code Execution
Check Point and CERT-In issue emergency alerts for critical CVSS 9.8 flaw CVE-2026-91843 in Security Management and Log Servers allowing remote unauthenticated root compromise.
Mei-Lin Chen20 Sep 202614 min read
ThreatsCloud & SaaSCritical
Cisco Secure Firewall Flaw Weaponized to Compromise Perimeter Gateways
Cisco issues emergency software hardening release for Secure Firewall ASA, FTD, and FMC addressing actively exploited critical vulnerability CVE-2026-20329.
Priya Raman19 Sep 202613 min read
ThreatsCloud & SaaSCritical
Amazon EKS Network Policy Agent Flaw Allows Pod Isolation Bypass Across Kubernetes Clusters
AWS patches high-severity flaw CVE-2026-86831 in Amazon EKS aws-network-policy-agent allowing unauthorized pod communication and network isolation bypass.
Daniel Okafor19 Sep 202611 min read
ThreatsCloud & SaaSHigh
Ubiquiti UniFi OS Input Validation Vulnerability CVE-2026-34910 Weaponized Against Enterprise Network Edge
CISA adds Ubiquiti UniFi OS vulnerability CVE-2026-34910 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation against network edge gateways.
Aisha Noor17 Sep 202613 min read
ThreatsTelecom & MediaCritical
Cisco Nexus 9000 Silicon One Switches Exposed to Unauthenticated Root RCE
Cisco disclosed CVE-2026-20212 (CVSS 9.8), an unauthenticated root code execution flaw on Silicon One-based Nexus 9000 datacenter switches due to open debugging ports.
Daniel Okafor3 Sep 20265 min read