Weekly briefing

Week 20 · 11 May – 17 May 2026 UTC · assess the changes, then plan the next dates.

What to assess first

11 May – 17 May · dates to 16 Jun Check coverage

Act on1

14May
Exploited14 May 2026
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CVE-2026-20182
Related evidence (5)
- Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
  Public source · Same source page; the statements may concern different changes
- Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
  Public source · Same source page; the statements may concern different changes
- Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
  Public source · Same source page; the statements may concern different changes
- Cisco SD-WAN Path Traversal Vulnerability
  Public source · Same source page; the statements may concern different changes
- Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
  Public source · Same source page; the statements may concern different changes

Coming up8

26May
Message Center action dateDue 26 May 2026
MC1310684: OneDrive for Business: Bug fixes to ensure storage quota aligns with license limitsMicrosoft 365 Message Center Archive by Merill Fernando
27May
Message Center action dateDue 27 May 2026
MC1293484: Excel Desktop update required to connect to Power Platform Analytical DataflowsMicrosoft 365 Message Center Archive by Merill Fernando
28May
Message Center action dateDue 28 May 2026
MC1300584: Microsoft Entra: App Instance Lock enabled by default for new applicationsMicrosoft 365 Message Center Archive by Merill Fernando
29May
CISA KEV deadlineDue 29 May 2026
Microsoft Exchange Server Cross-Site Scripting Vulnerability
CVE-2026-42897
31May
Message Center action dateDue 31 May 2026
MC1268926: Microsoft AutoUpdate (MAU) CDN Endpoint Update for MacMicrosoft 365 Message Center Archive by Merill Fernando
3Jun
CISA KEV deadlineDue 3 Jun 2026
Microsoft Windows Buffer Overflow Vulnerability
CVE-2008-4250
Same day: CISA KEV deadline: Microsoft DirectX NULL Byte Overwrite Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Defender Link Following Vulnerability; CISA KEV deadline: Microsoft Defender Denial of Service Vulnerability
6Jun
End of servicingDue 6 Jun 2026
End of servicing: Microsoft Configuration Manager, Version 2409
9Jun
Patch TuesdayScheduled for 9 Jun 2026
Patch Tuesday, 9 June 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

Changed3

15May
Security15 May 2026
Microsoft Exchange Server Cross-Site Scripting Vulnerability
CVE-2026-42897
15May
Security15 May 2026
WAF - WAF Release - 2026-05-15 - Emergency
Cloudflare WAF changelog
14May
Security14 May 2026
VMSA-2026-0003: VMware Fusion updates address privilege escalation vulnerability (CVE-2026-41702)
VMware security advisories (Broadcom)

How this list is chosen

Changes from 11 May 2026 – 17 May 2026 UTC and dates due up to 16 Jun 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.