Weekly briefing
Week 40 · 28 Sep – 4 Oct 2026 UTC · assess the changes, then plan the next dates.
Act on4
-
Fortinet · 2 security records
CVE-2026-104286
-
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
CVE-2026-76504
-
Availability (free/busy) fails for delegated mailboxes in Exchange hybrid deployments that use Graph API only
Exchange Server update known issues
Coming up4
-
Patch Tuesday, 13 October 2026
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
-
End of support: 16 products
Access, Excel, Office, OneNote, Outlook, PowerPoint, Publisher, Skype for Business, Visio, Word LTSC 2021; Office LTSC 2021 for Mac; Project 2021 (LTSC); Windows 10 2016 LTSB; Windows 10 IoT Enterprise LTSB 2016; Windows Server 2012 R2, Extended Security Update Year 3; Windows Server 2012, Extended…
Same day: Retirement: 10 products; End of servicing: 2 products; End of support: Office LTSC 2021; Recorded guidance date: AD FS DKM container hardening; Message Center action date: MC1472429: Support for Office LTSC 2021, and additional apps will end on October 13, 2026
-
Retirement Update: SAP container images removed October 14, 2026
Same day: Recorded guidance date: NTLMv1 SSO enforcement phases
How this list is chosen
Changes from 28 Sep 2026 – 4 Oct 2026 UTC and dates due up to 3 Nov 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.