Weekly briefing
Week 38 · 14 Sep – 20 Sep 2026 UTC · assess the changes, then plan the next dates.
Act on4
-
Google Pixel Improper Authorization Vulnerability
CVE-2026-58704
-
Cisco · 23 security records
CVE-2026-76460
-
Cisco Secure Email Gateway SQL Injection Vulnerability
CVE-2026-76461
-
Access violation when you query sys.dm_exec_requests during database recovery
SQL Server update known issues
Coming up4
-
Microsoft Windows Link Following Vulnerability
CVE-2026-81963
Same day: CISA KEV deadline: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
-
Patch Tuesday, 13 October 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
How this list is chosen
Changes from 14 Sep 2026 – 20 Sep 2026 UTC and dates due up to 20 Oct 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.