Weekly briefing

Week 29 · 13 Jul – 19 Jul 2026 UTC · assess the changes, then plan the next dates.

What to assess first

13 Jul – 19 Jul · dates to 18 Aug Check coverage

Act on3

16Jul
Security16 Jul 2026
Fortinet · 2 security records
CVE-2026-25089
Related evidence (1)
- FortiSandbox: Second-Order OS Command Injection via JSON Input on start vnc feature
  Public source · Same source page; the statements may concern different changes
15Jul
Exploited15 Jul 2026
Oracle E-Business Suite Improper Privilege Management Vulnerability
CVE-2026-46817
Related evidence (1)
- Oracle Critical Security Patch Update Advisory - May 2026
  Public source · Same source page; the statements may concern different changes
13Jul
Exploited13 Jul 2026
Cisco IOS Cross-Site Request Forgery Vulnerability
CVE-2008-4128

Coming up8

24Jul
Message Center action dateDue 24 Jul 2026
MC1403409: Required update for organizational authentication in Excel Power Query (Entra ID)Microsoft 365 Message Center Archive by Merill Fernando
Same day: Message Center action date: MC1422074: OpenAI models will soon be available as a subprocessor in Microsoft 365 Copilot
25Jul
CISA KEV deadlineDue 25 Jul 2026
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
CVE-2026-50522
28Jul
Model retirementDue 28 Jul 2026
Google Gemini: gemini-2.5-computer-use-preview-10-2025
Same day: CISA KEV deadline: Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
29Jul
Message Center action dateDue 29 Jul 2026
MC1393806: Microsoft Teams: Graph API transcript access controls for administratorsMicrosoft 365 Message Center Archive by Merill Fernando
Same day: Message Center action date: MC1441767: Follow up to IT1431577: Recommended update KB5101684 Preview for Windows devices
30Jul
Message Center action dateDue 30 Jul 2026
MC1323250: [Action Required] Update scripts using Get-MailDetailTransportRuleReport and Get-MailTrafficPolicyReportMicrosoft 365 Message Center Archive by Merill Fernando
31Jul
End of supportDue 31 Jul 2026
Azure Kubernetes Service Kubernetes 1.33
Same day: Message Center action date: MC1293480: (Updated) Exchange Online: Retirement of legacy TLS versions for POP and IMAP connections; Message Center action date: MC1422057: Update Exchange Web Services (EWS) allow list configuration for calendar
1Aug
Message Center action dateDue 1 Aug 2026
MC1192257: Microsoft Defender Threat Intelligence: Convergence with Microsoft Defender and Microsoft SentinelMicrosoft 365 Message Center Archive by Merill Fernando
11Aug
Patch TuesdayScheduled for 11 Aug 2026
Patch Tuesday, 11 August 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

Changed1

16Jul
Security16 Jul 2026
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
CVE-2026-58644

How this list is chosen

Changes from 13 Jul 2026 – 19 Jul 2026 UTC and dates due up to 18 Aug 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.