Weekly briefing

Week 42 · 12 Oct – 18 Oct 2026 UTC · assess the changes, then plan the next dates.

What to assess first

12 Oct – 18 Oct · dates to 17 Nov Check coverage

Act on5

16Oct
Exploited16 Oct 2026
Fortinet Multiple Products Path Traversal Vulnerability
CVE-2025-61624
15Oct
Exploited15 Oct 2026
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
CVE-2026-21589
Related evidence (2)
- WAF - WAF Release - 2026-10-12
  Public source · Shared CVE CVE-2026-21589
- Jira Service Management Data Center: Arbitrary File Access (CVE-2026-21589)
  Public source · Shared CVE CVE-2026-21589
14Oct
Security14 Oct 2026
Palo Alto Networks · 10 security records
CVE-2026-0322
Related evidence (1)
- CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)
  Public source · Shared CVE CVE-2026-0322
14Oct
Security14 Oct 2026
Cisco · 3 security records
CVE-2026-76519
13Oct
Security13 Oct 2026
Microsoft 365 Apps / Windows / Windows Server · 2 security records
CVE-2026-96951
Related evidence (6)
- Users might be unable to sign in to OWA or send emails on Exchange Server
  Public source · Shared KB KB5126651
- Windows Update Service Elevation of Privilege Vulnerability
  Public source · Shared KB KB5126646
- Windows Client License Service Elevation of Privilege Vulnerability
  Public source · Shared KB KB5126646
- Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
  Public source · Shared KB KB5126646
- Windows Update Service Elevation of Privilege Vulnerability
  Public source · Shared KB KB5126646
- Microsoft Graphics Component Remote Code Execution Vulnerability
  Public source · Shared KB KB5126646

Coming up3

19Oct
Announced retirementDue 19 Oct 2026
GitHub Copilot models deprecated on October 19, 2026
Same day: Recorded guidance date: NTLMv1 SSO enforcement phases; Message Center action date: MC1481309: Microsoft Entra ID: Enhance protection of the authentication experience by blocking external script injection
22Oct
Model retirementDue 22 Oct 2026
Google Gemini: veo-3.1-lite-generate-preview, veo-3.1-generate-preview, veo-3.1-fast-generate-preview and gemini-omni-flash-preview
23Oct
Model retirementDue 23 Oct 2026
OpenAI: 9 models, among them gpt-3.5-turbo-0125, gpt-3.5-turbo and gpt-3.5-turbo-completions

How this list is chosen

Changes from 12 Oct 2026 – 18 Oct 2026 UTC and dates due up to 17 Nov 2026. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.