INCIBE-CERT Notice
INCIBE-CERT Reports Critical Tankuam Places Account Takeover Flaw
09/22/2026
Tankuam Places password-recovery tokens could reset other users' accounts, including administrators. Kompini reports a service-side correction; obtain confirmation that your deployment is covered and review suspicious reset activity rather than seeking a downloadable patch.
INCIBE-CERT Reports Fixed 1millionbot Chatbot XSS
09/21/2026
The 1millionbot hosted-chatbot fix addresses unsafe Markdown or content blocks in the user's own session. Confirm the provider's managed-service correction and validate approved link rendering; there is no customer package to install.