Nessus 10.12.5 fixes nine vulnerabilities requiring authenticated users or privileged attackers. Update the scanner application, preserve configuration and scan history, and coordinate running jobs; current scan plugins alone do not establish fixed scanner software.
End-of-life EasyIO FG controllers have hard-coded-credential and privilege-management weaknesses with no firmware patch planned. Restrict network and physical access, preserve configuration, and coordinate supported replacement with building operations rather than attempting an unavailable upgrade.
Fortinet lists fixed FortiMail releases for exploited CVE-2026-104286. Preserve evidence, update each branch, validate mail flow, and retain records.
Apple's crafted-file code-execution flaw is listed in CISA KEV, with Apple reporting possible targeted exploitation. Prioritize supported devices and high-risk users, apply the matching update, and preserve evidence; patching does not establish absence of prior compromise.
Amazon Linux maps one AF_UNIX fix to thirty-five kernel-specific live patches. Match the running kernel and confirm livepatch prerequisites and loaded status; installing every package is wrong, and livepatching does not eliminate native-kernel updates or planned reboots.
Amazon Linux SSM Agent updates address bundled dependency flaws and authenticated port-forwarding SSRF that can expose instance-role credentials. Update the deployed agent and validate management workflows; the set does not imply unauthenticated Internet exposure for every flaw.
Amazon Linux 2023 advisories map an AF_UNIX kernel fix to separate 6.1, 6.12 and 6.18 streams. Select the host's matching supported package and verify runtime state; the brief defect description does not establish remote code execution.
Debian 13's Firefox ESR update fixes browser security flaws while moving packaging from the 140 to 153 series. Validate managed-browser, profile and extension behavior alongside installation; this is also a branch transition.
Debian 13 Tor updates address multiple denial-of-service vulnerabilities with fixed package 0.4.9.13-0+deb13u1. Follow the supported trixie update path; the announcement's missing CVE identifiers do not mean the release lacks security impact.
Ubuntu Authen::SASL updates address a login-validation flaw, but Canonical's summary and detailed impact descriptions conflict. Apply the matching library build and check authentication success and rejection without presenting either impact account as definitively reconciled.
