Security Notices
Palo Alto PAN-OS Management RCE Is Listed as Attacked
Palo Alto confirms limited CVE-2026-0322 exploitation and lists three associated IPs. Patch PAN-OS, investigate management access, and retain evidence.
CISA KEV Adds Two Chained AhsayCBS Vulnerabilities
CISA added two chained AhsayCBS flaws to KEV. Apply Ahsay's replacement hotfix for the installed branch, reboot, validate, and retain evidence.
CERT/CC Warns of Three Bisheng Authorization Vulnerabilities
CERT/CC documents three Bisheng authorization flaws, including an unpatched legacy SSO bypass. Upgrade fixed paths, restrict SSO, and retain evidence.
CERT/CC Details BoringSSL Name-Constraint Validation Differences
CERT/CC documents five BoringSSL Name Constraints findings with mixed status. Confirm the validation path, apply available updates, and retain evidence.
CERT/CC Coordinates Name-Constraint Differences Across TLS Libraries
CERT/CC details Name Constraints differences across TLS libraries. Map validation paths, apply project fixes, test authorization, and retain evidence.
Chrome Stable and Extended Stable Updates Fix Critical Flaws
Chrome Stable and Extended Stable updates fix Critical flaws. Confirm managed-browser versions, complete rollout, validate, and retain evidence.
Rockwell ArmorBlock 3.013 Fixes Authentication Bypass and DoS
Rockwell ArmorBlock 3.013 fixes authentication bypass and network-storm DoS. Match catalog numbers, update under OT controls, and retain evidence.
Komodo 2.3.0 Fixes Periphery Root Command Injection
Komodo 2.3.0 fixes Critical command injection in Periphery agents. Confirm multi-user grants and exposure, upgrade, review activity, and retain evidence.
CERT/CC Warns of Cross-Tenant Lowcoder Query Access
CERT/CC documents cross-tenant Lowcoder Query Library access without an official fix. Restrict endpoints and roles, isolate tenants, and retain evidence.
hex_core 0.20.0 Restores TLS Certificate Validation
hex_core 0.20.0 fixes TLS certificate validation on older Erlang/OTP paths. Confirm adapter and CA-store scope, update or mitigate, and retain evidence.