Vendor Security Advisory
Veeam Backup & Replication Updates Fix Four Security Flaws
Veeam Backup & Replication updates fix four flaws. Match product branches, install supported builds, validate backup services, and retain evidence.
Google Cloud Discloses Fixed Compute Engine Authorization Flaw
Google Cloud disclosed a fixed Compute Engine authorization flaw. Confirm historical use, assess disk-data risk, document status, and retain evidence.
HashiCorp Consul 2.1.0 Fixes Five Authorization and Availability Flaws
HashiCorp Consul 2.1.0 fixes five security flaws. Match ACL and Kubernetes scope, upgrade supported branches, validate policy, and retain evidence.
AWS CDK 2.274.0 Fixes Redshift Custom-Resource SQL Injection
AWS CDK 2.274.0 fixes Redshift custom-resource SQL injection. Upgrade packages, review PUBLIC grants, validate deployments, and retain evidence.
AWS Directs Trust-Bundle Updates After eMudhra Key Compromise
AWS published eMudhra trust-bundle guidance. Update customer-managed components, track service rollouts, validate TLS dependencies, and retain evidence.
Oracle Issues Emergency Java Trust-Store Update for eMudhra Risk
Oracle issued an emergency Java trust-store alert. Inventory listed runtimes, install the latest patch or mitigation, validate, and retain evidence.
AWS Remediates MCP Server run_script Sandbox Validation
AWS remediated MCP Server run_script sandbox validation service-side. Confirm service use and access governance, document status, and retain evidence.
AWS Directs Multi Model Server Users to Migrate After Two Flaws
AWS says every Multi Model Server release is affected and no fix is planned. Restrict management access, migrate, validate workloads, and retain evidence.
ABB MES DokuWiki Installations Require Critical PHP Updates
ABB says MES DokuWiki servers require fixed PHP builds. Inventory servers, update PHP packages, validate help workflows, and retain evidence.
ABB Warns APROL R 4.4-65 and Earlier Are Exposed to PHP2Shell
ABB says APROL R 4.4-65 and earlier are exposed to PHP2Shell. Restrict HTTP(S), validate access controls, track patches, and retain evidence.