Vendor Security Advisory
AWS Private CA Connector 1.10.1 Fixes Issuer Authorization
AWS Private CA Connector 1.10.1 fixes issuer authorization. Inventory clusters, update both forms, review certificate issuance, and retain evidence.
Elastic Cloud Enterprise 3.8.6 and 4.2.1 Fix Seven Flaws
Elastic Cloud Enterprise 3.8.6 and 4.2.1 fix seven flaws. Match host and deployment prerequisites, update, validate, and retain evidence.
Nozomi Guardian and CMC 26.4.0 Fix Update-Path Root Execution
Nozomi Guardian and CMC 26.4.0 fix update-bundle root execution. Restrict administrators, update appliances, validate, and retain evidence.
Octopus Server Updates Restrict LDAP Directory Searches
Octopus Server updates restrict LDAP directory searches. Confirm LDAP use, update affected servers, validate authentication, and retain evidence.
Canva Ortto WordPress Plugin 1.0.25 Fixes Three Flaws
Ortto WordPress plugin 1.0.25 fixes configuration overwrite, private product-data disclosure, and XSS. Update, inspect settings, and retain evidence.
ABB Warns ASPECT 3.09 and Earlier Are Exposed to PHP2Shell
ABB says ASPECT 3.09 and earlier face PHP2Shell RCE without a complete fix. Remove internet exposure, isolate, monitor, and retain evidence.
Apple Xcode 27.2 Fixes File and Sensitive-Data Access
Apple Xcode 27.2 fixes arbitrary-file and sensitive-data access. Inventory developer Macs and build hosts, update, validate tooling, and retain evidence.
Rancher 2.15.3 and Maintained Branches Fix Five Flaws
Rancher releases fix five proxy, shell, and Fleet authorization flaws. Match branch and component, update, validate clusters, and retain evidence.
AWS Publishes Brotli CVE-2026-111497 Mitigation Status
AWS published Brotli mitigation status. Match runtimes and images, rebuild or redeploy patched artifacts, validate workloads, and retain evidence.