AWS Directs Trust-Bundle Updates After eMudhra Key CompromiseNew!!
AWS published eMudhra trust-bundle guidance. Update customer-managed components, track service rollouts, validate TLS dependencies, and retain evidence.
Postiz 2.25.3 Fixes File Read and Token Forgery FlawsNew!!
Postiz 2.25.3 fixes arbitrary file read and token forgery. Upgrade promptly, preserve relevant evidence, validate access, and retain change proof.
HCL BigFix Updates CA Bundle After Certificate CompromiseNew!!
HCL BigFix requires a current CA bundle after certificate compromise. Deploy BES Support v1520, validate downloads and TLS, and retain evidence.
Oracle Issues Emergency Java Trust-Store Update for eMudhra RiskNew!!
Oracle issued an emergency Java trust-store alert. Inventory listed runtimes, install the latest patch or mitigation, validate, and retain evidence.
Postiz 2.25.2 Fixes Provider-Method File Read and CrashNew!!
Postiz 2.25.2 fixes internal provider-method abuse that can read server files or crash the backend. Preserve evidence, upgrade, validate, and retain proof.
CISA Adds Exploited Arista VeloCloud Orchestrator Flaw to KEVNew!!
CISA added exploited Arista VCO CVE-2026-114625 to KEV. Preserve evidence, upgrade supported trains, triage exposure, and retain proof.
CISA Adds Exploited Collabora Built-in CODE Flaw to KEVNew!!
CISA added exploited Collabora Built-in CODE CVE-2026-110447 to KEV. Preserve evidence, update or remove the app, triage, and validate.
AWS Remediates MCP Server run_script Sandbox ValidationNew!!
AWS remediated MCP Server run_script sandbox validation service-side. Confirm service use and access governance, document status, and retain evidence.
AWS Directs Multi Model Server Users to Migrate After Two FlawsNew!!
AWS says every Multi Model Server release is affected and no fix is planned. Restrict management access, migrate, validate workloads, and retain evidence.
ABB MES DokuWiki Installations Require Critical PHP UpdatesNew!!
ABB says MES DokuWiki servers require fixed PHP builds. Inventory servers, update PHP packages, validate help workflows, and retain evidence.