74 openlast updated

HomeEnterprise

Enterprise

Enterprise patch issues, open ones first.

RSS feed

01

Open

CallTitleVendorProductsDate
Patch now
CallPatch nowTitleNetScaler ADC and Gateway CTX697305: 9 critical bugsEnterpriseVendorCitrixProductsNetScaler ADC and Gateway 14.1 before 14.1-73.57, NetScaler ADC and Gateway 13.1 before 13.1-64.39 +3Date
CallPatch nowTitleCVE-2026-105133/105134: AhsayCBS chain exploitedEnterpriseVendorAhsayProductsAhsayCBS v10 (through 10.3.4.0), AhsayCBS v9 +2Date
CallPatch nowTitleScreenConnect RMM+ extension: blank access key exploitedEnterpriseVendorConnectWiseProductsScreenConnect (cloud and on-premises) with RMM+ family extensions, RMM+ extension 1.0.31 and 1.0.32Date
CallPatch nowTitleVSA-2026-063: Xen Orchestra VM import flaw exploited, no fixEnterpriseHomelabVendorVatesProductsXen Orchestra 6.10.1 and earlier, Xen Orchestra Appliance +1Date
CallPatch nowTitleCVE-2026-102895: GPUStack hands out admin to proxiesEnterpriseHomelabVendorGPUStackProductsGPUStackDate
CallPatch nowTitleCVE-2026-111793: Openwave Webtop Transcoder exploitedEnterpriseVendorOpenwave MessagingProductsWebtop Media TranscoderDate
CallPatch nowTitleCVE-2026-116606: Barracuda ESG root chain exploitedEnterpriseVendorBarracudaProductsBarracuda Email Security Gateway, Barracuda Load Balancer ADC +4Date
CallPatch nowTitleCVE-2026-116779: FreeSWITCH SIP MESSAGE runs commandsEnterpriseHomelabVendorSignalWireProductsFreeSWITCHDate
CallPatch nowTitleCVE-2026-123218: IBM Aspera Faspex auth bypass exploitedEnterpriseVendorIBMProductsIBM Aspera Faspex 5Date
CallPatch nowTitleCVE-2026-124194, KB5132061: Patch Tuesday roundupEnterpriseEnd-user appsVendorMicrosoftProductsWindows 10, Windows 11 +5Date
CallPatch nowTitleCVE-2026-124194: Outlook zero-day leaks NTLM hashesEnterpriseEnd-user appsVendorMicrosoftProductsMicrosoft 365 Apps for Enterprise, Office LTSC 2024 +2Date
CallPatch nowTitleCVE-2026-125350: Chrome XML zero-day, Edge fix pendingEnterpriseEnd-user appsVendorGoogle, MicrosoftProductsGoogle Chrome, Microsoft Edge +1Date
CallPatch nowTitleCVE-2026-20320: Cisco BroadWorks XXE now exploitedEnterpriseVendorCiscoProductsCisco BroadWorks Application Delivery Platform, Cisco BroadWorks Application Server +2Date
CallPatch nowTitleN-central 2026.4 HF2: critical fix after public exploitsEnterpriseVendorN-ableProductsN-centralDate
CallPatch nowTitleVSA-2026-062: Xen Orchestra auth bypass is being exploitedEnterpriseHomelabVendorVatesProductsXen Orchestra, Xen Orchestra Appliance +1Date
CallPatch nowTitleCVE-2026-19868 SonicOS SSL VPN SAML/MFA bypass exploitedEnterprisefrom 2026-10VendorSonicWallProductsSonicOS Gen7 7.3.3-7015 and earlier, SonicOS Gen8 8.2.2-8015 and earlier +6Date
CallPatch nowTitleCVE-2024-27834 Apple PAC bypass: now in KEVEnterpriseEnd-user appsfrom 2026-10VendorAppleProductsiOS 16.7.8, iOS 17.5 +6Date
CallPatch nowTitleCVE-2026-123158 OpenSSH sshole: patch Alpine nowEnterpriseHomelabfrom 2026-10VendorLinuxProductsOpenSSH before 10.6p2, Alpine Linux +4Date
CallPatch nowTitleCVE-2026-107441 Zyxel GS1900: exploited, old patch missed itEnterpriseHomelabfrom 2026-10VendorZyxelProductsZyxel GS1900-8, GS1900-8HP +8Date
CallPatch nowTitleCVE-2026-120422 Sogou Input Method abused to plant backdoorEnterpriseEnd-user appsfrom 2026-10VendorTencentProductsSogou Input Method for Windows before 16.10, Sogou Input Method 16.10Date
CallPatch nowTitleBTCPay Server 2.4.1 and older: hot wallets drainedEnterpriseHomelabfrom 2026-10VendorBTCPay ServerProductsBTCPay Server 2.4.1 and earlier, BTCPay Server 2.4.2Date
CallPatch nowTitlecPGuard 5.88.12-5.88.19: update channel pushed a backdoorEnterprisefrom 2026-10VendorOPSSHIELDProductscPGuard 5.88.12-5.88.19, cPGuard 5.88.25Date
CallPatch nowTitleCVE-2026-58115 Node-RED on Siemens IoT2050: exploitedEnterpriseHomelabfrom 2026-10VendorSiemens, Node-REDProductsSIMATIC IoT2050 Advanced, Industrial OS +1Date
CallPatch nowTitleCVE-2026-111357 Ivanti Connect Secure: patched? Patch againEnterprisefrom 2026-10VendorIvantiProductsIvanti Connect Secure 25.1.1, Ivanti Connect Secure 25.1.3 +1Date
CallPatch nowTitleCVE-2026-118539 Drupal Commerce: exploited access bypassEnterprisefrom 2026-10VendorDrupalProductsDrupal Commerce Core 3.x, Drupal Commerce Core 8.x-2.xDate
CallPatch nowTitleCVE-2026-119977 WordPress update race RCE: now exploitedEnterpriseHomelabfrom 2026-10VendorWordPressProductsWordPress 4.7 through 7.1.3, WordPress 7.1.4 +3Date
CallPatch nowTitleCVE-2026-20127 Cisco SD-WAN: exploited, KeyDrift malwareEnterprisefrom 2026-10VendorCiscoProductsCisco Catalyst SD-WAN Controller, Cisco Catalyst SD-WAN Manager +1Date
CallPatch nowTitleCVE-2026-97229 GitLab: exploited CI/CD regex RCE, CVSS 10EnterpriseHomelabfrom 2026-10VendorGitLabProductsGitLab CE, GitLab EE +1Date
CallPatch nowTitleSynology DSM SA-24:20: ransomware hits unpatched NAS boxesEnterpriseHomelabfrom 2026-10VendorSynologyProductsSynology DSM 7.4, Synology DSM 7.3 +5Date
CallPatch nowTitleCVE-2026-41709 ESXi: exploited flaw that skips the logsEnterpriseHomelabfrom 2026-10VendorVMwareProductsVMware ESXi 8.0, VMware ESX 9.0 +3Date
CallPatch nowTitleCVE-2026-46300 Fragnesia: exploited Linux kernel root bugEnterpriseHomelabfrom 2026-10VendorLinux, Debian, Ubuntu, Proxmox, Palo Alto NetworksProductsLinux kernel, Debian 11/12/13 +4Date
CallPatch nowTitleCVE-2026-76418 Cisco ASA/FTD: exploited SSL VPN crash bugEnterprisefrom 2026-10VendorCiscoProductsCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)Date
CallPatch nowTitleCVE-2026-48356 PolyShell: Magento and Adobe Commerce hitEnterprisefrom 2026-10VendorAdobeProductsAdobe Commerce, Magento Open Source +1Date
CallPatch nowTitleFortiMail CVE-2026-104286: your encrypted-mail portal accepts files from strangersEnterprisefrom 2026-10VendorFortinetProductsFortiMail 7.2, FortiMail 7.4 +2Date
CallPatch nowTitleCVE-2026-111497 Brotli 'Node2Shell': exploited; patch nowEnterprisefrom 2026-10VendorMicrosoftProducts.NET 8, .NET 9 +7Date
CallPatch nowTitleCVE-2026-109618/-109619 php2shell: patch PHP and appliancesEnterpriseHomelabfrom 2026-10VendorPHPProductsPHP 8.2-8.5, PAN-OS +7Date
CallPatch nowTitleCVE-2026-76519 Cisco SEG, CVE-2026-104935 Ivanti: exploitedEnterprisefrom 2026-10VendorCisco, IvantiProductsCisco Secure Email Gateway, Ivanti Connect SecureDate
CallPatch nowTitleFortiOS CVE-2025-61624: an April fix, an October KEV entry, and an implant called PEERSTITCHEnterprisefrom 2026-10VendorFortinetProductsFortiOS, FortiProxy +2Date
CallPatch nowTitleNextcloud's built-in Collabora app: exploited for six weeks, CVE'd for ten daysEnterpriseHomelabfrom 2026-10VendorNextcloudProductsCollabora Online - Built-in CODE Server (richdocumentscode) before 26.4.303Date
CallPatch nowTitleOctober 2026 Patch Tuesday: 1,413 fixes, one exploited zero-day, and an Exchange hangoverEnterpriseEnd-user appsfrom 2026-10VendorMicrosoftProductsWindows 10, Windows 11 +3Date
CallPatch nowTitlePAN-OS CVE-2026-0322: root on your firewall, exploited, and php2shell is next in lineEnterprisefrom 2026-10VendorPalo Alto NetworksProductsPAN-OS 10.2-12.2, PanoramaDate
CallPatch nowTitleArista VeloCloud Orchestrator: read-only users, now with superuser energyEnterprisefrom 2026-10VendorAristaProductsVeloCloud OrchestratorDate
CallPatch nowTitleFortiOS 7.6.8, 7.4.13: October 2026 hardening releaseEnterprisefrom 2026-10VendorFortinetProductsFortiOS, FortiManager +4Date
CallPatch nowTitleBeyondTrust Remote Support: the remote-access tool attackers are using for remote accessEnterprisefrom 2026-10VendorBeyondTrustProductsRemote SupportDate
CallPatch nowTitleCVE-2026-96951: exploited Windows Shell zero-dayEnterpriseEnd-user appsfrom 2026-10VendorMicrosoftProductsWindows 11 24H2/25H2/26H2, Windows 11 23H2 +5Date
CallPatch nowTitleCVE-2026-107406: NetScaler ADC and Gateway SAML overflowEnterprisefrom 2026-09VendorCitrixProductsNetScaler ADC, NetScaler Gateway +2Date
CallPatch nowTitleCVE-2026-86950: exploited Apple CoreGraphics zero-dayEnterpriseEnd-user appsfrom 2026-09VendorAppleProductsiOS, iPadOS +2Date
Hold
CallHoldTitleDell Pro 16 Plus BIOS 2.19.0 plus Intel drivers: no bootEnterpriseEnd-user appsVendorDell, IntelProductsDell Pro 16 Plus (PB16250) BIOS 2.19.0, Intel Ethernet driver 20.0.3.35 +2Date
CallHoldTitleKB4960 Veeam Appliance on AMD EPYC: boot panicEnterprisefrom 2026-10VendorVeeamProductsVeeam Software Appliance 13.1, Veeam Backup & ReplicationDate
CallHoldTitleKB5121794 Windows 11 26H2: Windows Hello sign-in breaksEnterprisefrom 2026-10VendorMicrosoftProductsWindows 11 26H2, Windows Hello +1Date
CallHoldTitleIntel's connectivity suite optimizes your IPv6 straight into connection resetsEnterpriseEnd-user appsfrom 2026-10VendorIntelProductsIntel Connectivity Performance Suite (OEM builds 40.25.725.165, 40.25.926.173 +6Date
CallHoldTitleDebian 13 kernel 6.12.111 and Broadcom NICs: Proxmox already did this oneEnterpriseHomelabfrom 2026-10VendorDebianProductsDebian 13 trixie kernel 6.12.111+deb13, bnxt_en +1Date
CallHoldTitleOld OnGuard vs new Windows: the Login Driver can't find its way homeEnterprisefrom 2026-10VendorLenelS2ProductsLenelS2 OnGuard 7.4-8.1, Windows cumulative updates Aug-Oct 2026Date
CallHoldTitleWindows 11 26H2 on Falcon fleets: hold the feature update, not the security updateEnterprisefrom 2026-10VendorMicrosoftProductsWindows 11 26H2, CrowdStrike FalconDate
Known issues
CallKnown issueTitleKB5131090: slmgr /rearm breaks Citrix MCS image prepEnterpriseVendorMicrosoft, CitrixProductsWindows Server 2022 (KB5131090), Windows Server 2019 (November CU +5Date
CallKnown issueTitleKB5132061: Sage 50 crashes after November Windows updatesEnterpriseEnd-user appsVendorMicrosoft, SageProductsSage 50 Accounting (US) 2026, Windows 11 24H2/25H2/26H2 (KB5132061) +4Date
CallKnown issueTitleKB5135557: NTLM signing change breaks App Volumes agentEnterpriseVendorMicrosoft, OmnissaProductsWindows 11 24H2 and 25H2 (KB5132061), Other Windows versions with November updates +1Date
CallKnown issueTitleWindows CUs leave SQL Server linked server connections openEnterpriseVendorMicrosoftProductsWindows Server 2025, Windows Server 2022 +7Date
CallKnown issueTitleKB5132061: install fails with 0x800f0993 or 0x800f0989EnterpriseEnd-user appsVendorMicrosoftProductsWindows 11 26H2, Windows 11 25H2 +1Date
CallKnown issueTitleCVE-2026-83844 Microsoft Paint RCE: Store-only fixEnterpriseEnd-user appsfrom 2026-10VendorMicrosoftProductsMicrosoft Paint, Windows 11Date
CallKnown issueTitleCVE-2026-98432 Veeam appliances: Linux kernel TCP fixEnterprisefrom 2026-10VendorVeeamProductsVeeam Software Appliance 13.1, Veeam Infrastructure Appliance 13.1 +4Date
CallKnown issueTitleKB5126836: Server 2012 R2 SAN disks vanish after updateEnterprisefrom 2026-10VendorMicrosoftProductsWindows Server 2012 R2 ESU (KB5126836)Date
CallKnown issueTitleKB5127648: shared printers fail with Error #87 in SettingsEnterprisefrom 2026-10VendorMicrosoftProductsWindows 11 24H2/25H2/26H2 (KB5127648), Windows 11 23H2 +1Date
CallKnown issueTitleOctober DC updates vs NetApp ONTAP: LDAP says your credentials are invalidEnterprisefrom 2026-10VendorMicrosoftProductsWindows Server 2016-2025 domain controllers, NetApp ONTAP 9.x +1Date
CallKnown issueTitleFortiOS 7.4 and 7.6: the GUI daemon that eats the firewall (bug 1227167)EnterpriseHomelabfrom 2026-10VendorFortinetProductsFortiOS 7.4, FortiOS 7.6Date
CallKnown issueTitleJava's second eMudhra alert: this time it's roots, and one of them is load-bearingEnterpriseEnd-user appsfrom 2026-10VendorOracleProductsJava SE, GraalVM for JDK +1Date
CallKnown issueTitleKB5127648: boot failures and install rollbacks on Windows 11EnterpriseEnd-user appsfrom 2026-10VendorMicrosoftProductsWindows 11 24H2/25H2/26H2, Dell Pro 14 +4Date
CallKnown issueTitleYour PEAP-MSCHAPv2 Wi-Fi stopped auto-connecting. That's not a bug, that's the roadmap.Enterprisefrom 2026-10VendorMicrosoftProductsWindows 11 24H2/25H2/26H2, Windows Server 2025Date
CallKnown issueTitleFortiOS 7.6.8 breaks admin SAML SSO (bug 1338764)Enterprisefrom 2026-10VendorFortinetProductsFortiOS 7.6.8, FortiGateDate
CallKnown issueTitleKB5127648: RDP error 0xC000000D with Admin protectionEnterprisefrom 2026-09VendorMicrosoftProductsWindows 11 24H2, Windows 11 25H2 +2Date
02

Resolved