Weekly briefing

Week 37 · 7 Sep – 13 Sep 2026 UTC · assess the changes, then plan the next dates.

What to assess first

7 Sep – 13 Sep · dates to 13 Oct Check coverage

Act on5

11Sep
Exploited11 Sep 2026
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
CVE-2026-85706
Related evidence (1)
- GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8
  Public source · Same source page; the statements may concern different changes
9Sep
Exploited9 Sep 2026
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
CVE-2025-25249
9Sep
Exploited9 Sep 2026
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2026-20079
9Sep
Exploited9 Sep 2026
Google Chromium V8 Out of Bounds Write Vulnerability
CVE-2026-87491
Related evidence (1)
- Edge 152.0.4191.66: fixes CVE-2026-87491, exploited in the wild
  Public source · Shared CVE CVE-2026-87491
8Sep
Security8 Sep 2026
Windows / Windows Server · 669 security records
CVE-2026-81963
Related evidence (6)
- Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
  Public source · Shared KB KB5122871
- Windows VHD miniport driver Elevation of Privilege Vulnerability
  Public source · Shared KB KB5122871
- Windows Server Elevation of Privilege Vulnerability
  Public source · Shared KB KB5122871
- Microsoft Trace Data Helper Elevation of Privilege Vulnerability
  Public source · Shared KB KB5122871
- Windows Installer Elevation of Privilege Vulnerability
  Public source · Shared KB KB5122871
- Windows Push Notifications Elevation of Privilege Vulnerability
  Public source · Shared KB KB5122871

Coming up3

14Sep
RetirementDue 14 Sep 2026
Retirement: 3 products
Azure Functions 1.0 Deprecation; Azure Monitor Data Collector API; Monitoring Support for AKS-Engine
15Sep
RetirementDue 15 Sep 2026
Retirement: 2 products
Activity logs legacy connector, storage integration API; Azure Maps Gen1 Price Tier
17Sep
RetirementDue 17 Sep 2026
Retirement: Azure Maps Render V1

How this list is chosen

Changes from 7 Sep 2026 – 13 Sep 2026 UTC and dates due up to 13 Oct 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.