Vendor Security Advisory
uniFLOW Online 2026.3 Fixes Legacy UI Session Retention
uniFLOW Online's Legacy UI could retain limited prior-user access during a specific emergency-mode login sequence. NT-ware reports the 2026.3 fix globally deployed; confirm service status rather than attempting a local cloud-service package upgrade.
Mattermost Updates Fix OAuth SSRF and Plugin Route Denial of Service
Mattermost updates address administrator-controlled OAuth SSRF and authenticated plugin-request memory exhaustion. Match the fix to each server's release branch, update the cluster, and validate sign-in and plugin workflows; neither flaw is described as unauthenticated.
IBM Concert Software 3.0.1.1 Addresses Multiple Vulnerabilities
IBM Concert Software 1.0.0-3.0.0 requires the 3.0.1.1 update; no workaround is listed. Confirm IBM's deployment-specific instructions because its download wording conflicts, and distinguish a KEV-listed dependency from evidence of Concert compromise.
SolarWinds Observability 2026.2.3 Fixes Two Remote Code Execution Flaws
SolarWinds Observability Self-Hosted 2026.2.3 fixes two unauthenticated code-execution flaws with configuration-specific prerequisites. Obtain vendor guidance on the unnamed settings and communication mode, then update; default settings alone do not establish safety.
Adobe Premiere Pro Update Addresses 1 Vulnerability
Premiere Pro 26.5 and 25.6.6 address an SSRF security-feature bypass. Update the matching branch and validate projects, plugins and exports; the advisory does not establish an internet-facing code-execution vulnerability.
Adobe Substance 3D Modeler Update Addresses 4 Vulnerabilities
Substance 3D Modeler 1.22.8 fixes four memory-safety flaws that can permit code execution with user interaction. Deploy the stated fixed release and verify the application version before resuming untrusted-asset workflows.
Adobe AEM Forms on JEE Update Addresses 6 Vulnerabilities
AEM Forms on JEE needs its branch-specific service pack or hotfix for six Critical flaws. A 6.5.25 base installation remains affected without the required hotfix; verify every applicable node.
Adobe Connect Update Addresses 9 Vulnerabilities
Adobe Connect and its Android app require separate updates for flaws including code execution, file reads and privilege escalation. Inventory both the deployment and client fleet; authentication and interaction requirements differ across the nine issues.
Adobe Bridge Update Addresses 7 Vulnerabilities
Adobe Bridge 15.1.8 LTS and 16.0.7 fix six code-execution flaws and one memory-exposure flaw requiring user interaction. Update the installed branch; Adobe reports no known exploitation in the wild.
Adobe Content Credentials SDK Update Addresses 7 Vulnerabilities
Adobe Content Credentials updates address security-feature bypass and denial of service in the Rust SDK and C2PA Tool. Update embedded c2pa dependencies and standalone c2patool separately, rebuilding and redeploying consuming applications where required.