Vendor Security Advisory
Elastic Updates Elasticsearch for Seven Resource-Consumption Flaws
Seven Elasticsearch advisories address service-disrupting resource consumption with different affected ranges and fixes. Check all applicable notices and supported cluster upgrade order; access restrictions reduce exposure but are not equivalent to vendor fixes.
Elastic Kibana Updates Address Authorization, Privilege, and Availability Risks
Kibana advisories cover Agent Builder privileges, Timeline authorization, cross-space Synthetics deletion and resource exhaustion. Match enabled features, roles and release ranges across all four notices before selecting a compatible stack update.
wolfSSL 5.9.4 Fixes Eleven TLS and Certificate Validation Flaws
wolfSSL 5.9.4 fixes TLS and certificate-validation flaws whose applicability depends on build options and APIs. Update embedded and static copies as well as shared libraries, and follow the vendor's persistent-state and cache-handling requirements.
AWS Updates pgcollection to Address Type-Confusion Remote Code Execution
Self-managed pgcollection 2.0.0-2.1.1 needs an update for type-confusion code execution. Inventory installed extensions and plan recovery checks; AWS's unaffected RDS/Aurora statement applies specifically to the pgcollection version named in its bulletin.
AWS Kiro IDE 1.0.242 Restricts Agentic Writes from Untrusted Workspaces
Kiro IDE agentic work in an untrusted workspace could modify global configuration outside that workspace. Upgrade to 1.0.242 or later and separately review existing settings, preserving suspicious workspace and filesystem evidence before repair.
ManageEngine Applications Manager Updates Address Six Vulnerabilities
ManageEngine Applications Manager fixes span Enterprise synchronization, plugin identity, monitor scope and an installer-exposed cloud key. Match the supported build track and review unauthorized changes; updating does not establish that the old cloud key was revoked.
WatchGuard AuthPoint 7.5.1 Fixes LDAP Authentication Bypass
AuthPoint Authentication Gateway 7.5.1 fixes an LDAP Sync first-factor bypass under non-default conditions. Update affected gateways while preserving additional factors; WatchGuard explicitly says those factors still apply, so this is not a complete MFA bypass.
Forcepoint Security Engine Updates Fix Policy Bypass
Forcepoint Security Engine has a policy-bypass flaw with non-contiguous affected versions and a vendor-reported exploitation signal. Match the exact branch, obtain the supported fix, and avoid inventing packet-level workarounds from the sparse public description.
ManageEngine ITOM Updates Address Eleven Vulnerabilities
ManageEngine ITOM fixes span editions, plugins, roles and disjoint release intervals. Inventory Central/Probe and Firewall Analyzer exposure, follow each applicable upgrade matrix, and review unauthorized changes rather than assuming a higher build resolves every issue.
Foxit PDF Reader and Editor Updates Address 31 Vulnerabilities
Foxit Reader and Editor updates cover document-processing, updater, path-traversal and signature-validation flaws. Match product, platform and release branch before updating; the thirty-one-CVE set does not mean every issue affects every installation.