Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/272 feeds/APIs · 469/469 docs · 7/9 advisories · checked 01:28 UTC Customize Public modeDiscuss ChangeIntel on Discord

Weekly briefing

Week 16 · 13 Apr – 19 Apr 2026 UTC · assess the changes, then plan the next dates.

What to assess first

13 Apr – 19 Apr · dates to 19 May Check coverage

Act on1

  1. Exploited13 Apr 2026

    Fortinet FortiClient EMS SQL Injection Vulnerability

    CVE-2026-21643

Coming up8

  1. CISA KEV deadlineDue 27 Apr 2026

    Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

    CVE-2012-1854

    Same day: CISA KEV deadline: Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability; CISA KEV deadline: Microsoft Windows Out-of-Bounds Read Vulnerability; CISA KEV deadline: Microsoft Windows Link Following Vulnerability

  2. RetirementDue 28 Apr 2026

    Retirement: Azure Application Gateway v1

    Same day: CISA KEV deadline: Microsoft Office Remote Code Execution; CISA KEV deadline: Microsoft SharePoint Server Improper Input Validation Vulnerability

  3. RetirementDue 30 Apr 2026

    Retirement: Custom Commands

    Same day: Message Center action date: MC1181996: Migration update for Office 365 connectors retirement in Teams – webhook URL support

  4. Patch TuesdayScheduled for 12 May 2026

    Patch Tuesday, 12 May 2026

    The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

  5. End of servicingDue 12 May 2026

    End of servicing: .NET 9

    Same day: CISA KEV deadline: Microsoft Windows Protection Mechanism Failure Vulnerability

Changed3

  1. Security15 Apr 2026

    WAF - WAF Release - 2026-04-15

    Cloudflare WAF changelog

  2. Security14 Apr 2026

    April 2026 Security Updates

    Microsoft Security Update Guide

  3. Security14 Apr 2026

    Microsoft Office Remote Code Execution

    CVE-2009-0238

How this list is chosen

Changes from 13 Apr 2026 – 19 Apr 2026 UTC and dates due up to 19 May 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 27 Oct 01:28 UTC · 271 of 272 readable · 269 fully read · documentation 469/469 current