Security Notices
ZTE Z80 Ultra Update Restricts Wi-Fi MAC Address Disclosure
A non-privileged application can retrieve the Wi-Fi MAC address on affected ZTE Z80 Ultra devices. Match the NX741J model and installed build, obtain the supported firmware update, and review untrusted applications.
Debian Chromium Update Fixes 16 Security Vulnerabilities
Debian DSA-6508-1 fixes 16 Chromium CVEs in trixie. Confirm package and runtime versions, apply the supported update, restart, and validate.
Check Point Revises Management Server RCE Advisory for Active Exploitation
Check Point reports active exploitation of unauthenticated file upload and script execution on management and log servers. Restrict management access, apply the branch-specific hotfix, and investigate compromise; Firewall Appliance and Spark products are outside this scope.
Elixir Mint 1.10.1 Fixes HTTP Response-Smuggling Parsing Flaw
Mint 1.10.1 fixes CVE-2026-82672, an HTTP response-framing flaw. Validate affected dependencies and pooled intermediary paths, then update.
CVE-2026-76431: Cisco ISE Arbitrary File Deletion Vulnerability
An ISE or ISE-PIC administrator can delete arbitrary files and directories through web file management. Apply the specific fix, preserve relevant requests, and assess restoration separately; patching does not recover content already deleted.
CVE-2026-76432: Cisco ISE Arbitrary File Write Vulnerability
An ISE or ISE-PIC administrator can upload files outside the intended directory. Apply the CVE-specific fix and investigate existing uploads; arbitrary file writing is established, but command execution is not demonstrated by this description.
CVE-2026-76433: Cisco ISE Information Disclosure Vulnerability
Unauthenticated provisioning-download requests can expose protected files in ISE and ISE-PIC. Review service reachability and apply the specific fix; the administrator requirement of neighboring upload and deletion flaws does not apply here.
CVE-2026-76434: Cisco ISE Arbitrary File Read Vulnerability
An ISE or ISE-PIC administrator can read arbitrary files through certificate import. Install the CVE-specific update and assess earlier import requests; the description supports file disclosure, not command execution from importing a certificate.