Security Notices
OpenCVE Security Update Addresses 1 Vulnerability
OpenCVE notification testing can let authorized users send server-side requests to internal services. Upgrade to 3.0.0 or later, review notification permissions and restrict egress while planning the supported major-version migration.
psd-tools Security Update Addresses 1 Vulnerability
psd-tools can exhaust worker memory from attacker-controlled PSD dimensions before validation. Update deployed Python workers to 1.17.4 and retain memory controls; file-byte limits and exception handling alone do not contain the allocation.
Microsandbox Security Update Addresses 1 Vulnerability
Microsandbox before 0.5.10 can expose host-side secrets in process arguments to local users or co-resident processes. Upgrade affected runtimes, replace running sandboxes and assess credential rotation; patching does not revoke previously exposed secrets.
SolarWinds Observability 2026.2.3 Fixes Two Remote Code Execution Flaws
SolarWinds Observability Self-Hosted 2026.2.3 fixes two unauthenticated code-execution flaws with configuration-specific prerequisites. Obtain vendor guidance on the unnamed settings and communication mode, then update; default settings alone do not establish safety.
Adobe Premiere Pro Update Addresses 1 Vulnerability
Premiere Pro 26.5 and 25.6.6 address an SSRF security-feature bypass. Update the matching branch and validate projects, plugins and exports; the advisory does not establish an internet-facing code-execution vulnerability.
Adobe Substance 3D Modeler Update Addresses 4 Vulnerabilities
Substance 3D Modeler 1.22.8 fixes four memory-safety flaws that can permit code execution with user interaction. Deploy the stated fixed release and verify the application version before resuming untrusted-asset workflows.
Adobe AEM Forms on JEE Update Addresses 6 Vulnerabilities
AEM Forms on JEE needs its branch-specific service pack or hotfix for six Critical flaws. A 6.5.25 base installation remains affected without the required hotfix; verify every applicable node.
Adobe Connect Update Addresses 9 Vulnerabilities
Adobe Connect and its Android app require separate updates for flaws including code execution, file reads and privilege escalation. Inventory both the deployment and client fleet; authentication and interaction requirements differ across the nine issues.
Adobe Bridge Update Addresses 7 Vulnerabilities
Adobe Bridge 15.1.8 LTS and 16.0.7 fix six code-execution flaws and one memory-exposure flaw requiring user interaction. Update the installed branch; Adobe reports no known exploitation in the wild.