Synology SA-26:14 Fixes Critical PHP2Shell RCE in DSM PackagesNew!!
Synology fixed critical PHP2Shell RCE in DSM packages. Update Calendar, Mail Station, and supported PHP branches; migrate PHP 7.3; retain evidence.
Tenable Security Center Patch SC-202610.1 Updates PHPNew!!
Tenable released SC-202610.1 for Tenable Security Center. Apply the patch, verify PHP and service health, test operations, and retain evidence.
Tenable Enclave Security Patch SC-202610.1 Updates PHPNew!!
Tenable released SC-202610.1 for Tenable Enclave Security. Apply the patch, verify PHP and service health, test operations, and retain evidence.
Okta Access Gateway 2026.44.0 Updates PHP for Two RCE FlawsNew!!
Okta Access Gateway 2026.44.0 updates PHP for two RCE flaws. Upgrade appliances, verify gateway configuration and exposure, and retain evidence.
Okta Access Gateway 2026.10.2 Fixes Admin Console Command ExecutionNew!!
Okta Access Gateway 2026.10.2 fixes authenticated Admin Console command execution. Upgrade appliances, review administrator activity, and retain evidence.
Okta Access Gateway 2026.10.2 Fixes Authentication Source VerificationNew!!
Okta Access Gateway 2026.10.2 fixes authentication-source verification. Upgrade appliances, review active sessions and admin access, and retain evidence.
WatchGuard Agent 1.25.14 Fixes Windows Log Directory PermissionsNew!!
WatchGuard fixed Windows Agent log-directory permissions. Update to 1.25.14, verify access controls and logging, and retain endpoint evidence.
WatchGuard Revises FileVault Recovery-Key Fix to Agent 1.17.23New!!
WatchGuard revised its FileVault recovery-key fix to Agent 1.17.23. Update affected Macs, assess key exposure, rotate as needed, and retain evidence.
Ubuntu USN-8890-2 Extends libsoup Fixes to Ubuntu 26.10New!!
Ubuntu USN-8890-2 extends eight libsoup fixes to Ubuntu 26.10. Update libsoup3, restart consumers, test HTTP workflows, and retain evidence.
AWS Bulletin 2026-143 Addresses Critical PHP Runtime RCENew!!
AWS bulletin 2026-143 covers two critical PHP RCE flaws. Inventory customer runtimes, deploy fixed versions, verify workers, and retain evidence.
