Vendor Security Advisory
Django 6.1.2, 6.0.9, and 5.2.18 Fix Four Security Issues
Django released 6.1.2, 6.0.9, and 5.2.18 for four security issues. Inventory applications, update the active branch, test behavior, and retain evidence.
Mozilla Firefox 157.0.1 Fixes a File-Handling Mitigation Bypass
Mozilla released Firefox 157.0.1 for a file-handling mitigation bypass. Inventory browsers, update supported builds, validate policy, and retain evidence.
MediaTek October 2026 Bulletin Fixes 31 Chipset Vulnerabilities
MediaTek's October 2026 bulletin fixes 31 chipset flaws. Map devices to affected chipsets, obtain OEM updates, validate, and retain evidence.
Atlassian Fixes Critical Arbitrary File Access Across Data Center Products
CISA added Atlassian CVE-2026-21589 to KEV after confirming exploitation. Patch affected Data Center products, investigate, and retain evidence.
Citrix NetScaler Updates Fix CVE-2026-88779
Citrix NetScaler CVE-2026-88779 is now in CISA KEV. Validate SAML exposure, update by October 7, triage, and preserve evidence.
AWS Fixes SageMaker Studio Space Startup Command Injection
Amazon Web Services (AWS) issued 2026-125-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
AWS Loom 1.7.0 Fixes Authentication and Outbound Request Flaws
Amazon Web Services (AWS) issued 2026-124-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
Google Chrome 154 Stable Update Fixes Eleven Vulnerabilities
Google released Chrome 154 Stable fixes for eleven CVEs. Update the applicable desktop and Android builds, validate operations, and retain evidence.
GitLab AI Gateway Updates Fix Critical CVE-2026-90970
Self-hosted GitLab AI Gateways need branch-specific fixes for authenticated prompt-template sandbox escape through crafted flows. Identify who hosts the gateway: updating the main GitLab application does not prove this separate component is fixed.
AWS Powertools for Lambda Fixes Data-Masking Fail-Open
Amazon Web Services (AWS) issued 2026-123-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.