Security Notices

Security Notices
Oracle Issues Emergency Java Trust-Store Update for eMudhra Risk

Oracle issued an emergency Java trust-store alert. Inventory listed runtimes, install the latest patch or mitigation, validate, and retain evidence.

Read this guide
Security Notices
Postiz 2.25.2 Fixes Provider-Method File Read and Crash

Postiz 2.25.2 fixes internal provider-method abuse that can read server files or crash the backend. Preserve evidence, upgrade, validate, and retain proof.

Read this guide
Security Notices
CISA Adds Exploited Arista VeloCloud Orchestrator Flaw to KEV

CISA added exploited Arista VCO CVE-2026-114625 to KEV. Preserve evidence, upgrade supported trains, triage exposure, and retain proof.

Read this guide
Security Notices
CISA Adds Exploited Collabora Built-in CODE Flaw to KEV

CISA added exploited Collabora Built-in CODE CVE-2026-110447 to KEV. Preserve evidence, update or remove the app, triage, and validate.

Read this guide
Security Notices
AWS Remediates MCP Server run_script Sandbox Validation

AWS remediated MCP Server run_script sandbox validation service-side. Confirm service use and access governance, document status, and retain evidence.

Read this guide
Security Notices
AWS Directs Multi Model Server Users to Migrate After Two Flaws

AWS says every Multi Model Server release is affected and no fix is planned. Restrict management access, migrate, validate workloads, and retain evidence.

Read this guide
Security Notices
ABB Warns APROL R 4.4-65 and Earlier Are Exposed to PHP2Shell

ABB says APROL R 4.4-65 and earlier are exposed to PHP2Shell. Restrict HTTP(S), validate access controls, track patches, and retain evidence.

Read this guide
Security Notices
ABB MES DokuWiki Installations Require Critical PHP Updates

ABB says MES DokuWiki servers require fixed PHP builds. Inventory servers, update PHP packages, validate help workflows, and retain evidence.

Read this guide
Security Notices
Google Cloud GCP-2026-071 Directs eMudhra CA Distrust Updates

Google Cloud GCP-2026-071 addresses compromised CA keys. Update customer-managed trust stores and gcloud, track managed rollout, and retain evidence.

Read this guide
Security Notices
Tenable Enclave Security Patch SC-202610.2 Updates PHP

Tenable released SC-202610.2 for Tenable Enclave Security. Apply the correct patch, verify PHP and service health, test operations, and retain evidence.

Read this guide