Identity & Access Management
Debian Bookworm cjose Update Fixes JWE Heap and Encryption FlawsNew!!
Debian fixes cjose JWE heap corruption and encryption flaws. Update bookworm packages, review affected algorithms and issued tokens, and retain evidence.
Red Hat Keycloak 26.6.9 Fixes SAML Signature BypassNew!!
Red Hat Keycloak 26.6.9 fixes SAML signature bypass. Update servers and operator images, validate federation and access controls, and retain evidence.
Delinea Secret Server 12.3.1 Fixes Three Access Flaws
Delinea Secret Server 12.3.1 fixes FIDO2 validation, partial login bypass and unsigned JWT flaws. Upgrade, validate access, and retain evidence.
Tenable Identity Exposure Updates Fix Three Vulnerabilities
Tenable Identity Exposure 3.93.6 and 3.77.18 fix three flaws, including critical command injection. Update, validate, review access, and retain evidence.
HashiCorp Boundary Updates Fix Vault Credential-Store SSRF
HashiCorp Boundary 1.0.2 and 0.21.6 fix Vault credential-store SSRF. Inventory controllers and permissions, update, validate, and retain evidence.
Ubuntu USN-8957-1 Fixes authd Account-Matching Flaw
Ubuntu USN-8957-1 fixes authd account matching. Update Ubuntu 26.10 to authd 0.7.1, restart the service, validate identity mapping, and retain evidence.
CISA Adds Exploited BeyondTrust Remote Support Flaw to KEV
CISA added exploited BeyondTrust CVE-2026-102764 to KEV. Patch Remote Support, preserve evidence, complete triage, and validate appliances.
HashiCorp Vault Updates Correct Non-Canonical ACL Policy Evaluation
HashiCorp published HCSEC-2026-43 security fixes. Inventory scope, apply supported updates, validate operations, and retain evidence.
HashiCorp Vault Enterprise Update Corrects Cross-Namespace ACL Resolution
HashiCorp published HCSEC-2026-42 security fixes. Inventory scope, apply supported updates, validate operations, and retain evidence.
HashiCorp Vault Updates Block Snapshot-Restored Plugin Code Execution
HashiCorp published HCSEC-2026-41 security fixes. Inventory scope, apply supported updates, validate operations, and retain evidence.