Vendor Security Advisory
OTRS 2026.7.1 Addresses Nine Security Vulnerabilities
OTRS 2026.7.1 fixes nine security issues, including critical authentication risks. Confirm edition scope, update, validate controls, and retain evidence.
Dassault Systèmes Publishes Six Tuleap Enterprise Security Advisories
Dassault Systèmes disclosed six High-severity Tuleap flaws. Confirm 17.0–17.5 exposure, obtain supported remediation, test, and retain evidence.
Bosch Rexroth PRI7000 Updates Bundled 7-Zip for CVE-2026-14266
Bosch updated PRI7000 for a High-severity 7-Zip XZ parsing flaw. Match the exact branch, update engineering stations, test, and retain evidence.
AWS Amplify Updates Fix Cross-Owner GraphQL Record Access
AWS fixes cross-owner access in Amplify GraphQL resolvers. Upgrade affected packages, redeploy backends, validate authorization, and retain evidence.
Xen XSA-522 Patch Prevents Network Backend Guest Crashes
Xen Project issued XSA-522. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
AWS CDK 2.267.0 Restricts Symlinks in Docker Asset Bundling
Amazon Web Services issued 2026-131-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
AWS databases-on-aws 1.7.1 Blocks Agent-Assisted Command Injection
Amazon Web Services issued 2026-130-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
AWS Toolkit for VS Code 4.10.0 Secures Cached CodeCatalyst Tokens
Amazon Web Services issued 2026-129-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
HashiCorp go-getter Updates Block S3 and GCS Path Traversal
HashiCorp published HCSEC-2026-44 security fixes. Inventory scope, apply supported updates, validate operations, and retain evidence.
HashiCorp Vault Updates Correct Non-Canonical ACL Policy Evaluation
HashiCorp published HCSEC-2026-43 security fixes. Inventory scope, apply supported updates, validate operations, and retain evidence.