Security Notices

Security Notices
Red Hat Fixes Dogtag PKI Profile Import Code Execution on RHEL 8
10/04/2026

Red Hat fixed Dogtag PKI profile-import code execution on RHEL 8. Restrict CA admins, update pki-core, review imports, and retain evidence.

Read this guide
Security Notices
Red Hat Fixes Sudo Time-Window Authorization Bypass on RHEL 8–10
10/04/2026

Red Hat expanded its sudo time-window authorization-bypass fix across RHEL 8–10. Audit timed rules, update each branch, validate, and retain evidence.

Read this guide
Security Notices
Red Hat Updates the RHEL 10.0 EUS Kernel for 19 Vulnerabilities
10/04/2026

Red Hat's RHEL 10.0 EUS kernel update fixes 19 flaws. Match entitled streams, install the fixed kernel, reboot, validate, and retain evidence.

Read this guide
Security Notices
Atlassian Fixes Critical Arbitrary File Access Across Data Center Products
10/04/2026

CISA added Atlassian CVE-2026-21589 to KEV after confirming exploitation. Patch affected Data Center products, investigate, and retain evidence.

Read this guide
Security Notices
MediaTek October 2026 Bulletin Fixes 31 Chipset Vulnerabilities
10/04/2026

MediaTek's October 2026 bulletin fixes 31 chipset flaws. Map devices to affected chipsets, obtain OEM updates, validate, and retain evidence.

Read this guide
Security Notices
Citrix NetScaler Updates Fix CVE-2026-88779
10/02/2026

Citrix NetScaler CVE-2026-88779 is now in CISA KEV. Validate SAML exposure, update by October 7, triage, and preserve evidence.

Read this guide
Security Notices
AWS Fixes SageMaker Studio Space Startup Command Injection
10/02/2026

Amazon Web Services (AWS) issued 2026-125-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
AWS Loom 1.7.0 Fixes Authentication and Outbound Request Flaws
10/02/2026

Amazon Web Services (AWS) issued 2026-124-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
Red Hat FreeRDP Update Fixes Critical CVE-2026-91949 on RHEL 10
10/02/2026

FreeRDP's server-side flaw can permit a disabled RDSTLS transport before authentication. Red Hat excludes outbound-only client use from that attack path; match the RHEL 10.2 package and verify the server's transport policy.

Read this guide
Security Notices
Red Hat Ruby Update Fixes CVE-2026-80212 on RHEL 10
10/02/2026

Crafted or spoofed DNS responses can exhaust memory in Ruby's resolv library. Red Hat's RHEL 10.2 update requires matching the packaged runtime and checking affected applications, not assuming separately installed Rubies are fixed.

Read this guide