Weekly briefing

Securitywifi: mt76: account non-AQL frames per peer rather than per link

Securitywifi: mt76: mt7603: initialize global station WCID

Securitywifi: mt76: mt7915: disable rx napi when removing device

Securitywifi: nl80211: check link is beaconing for color change

Securitywireguard: noise: reject response consumption after intermediate initiation

Securityworkqueue: Fix NULL current_pwq deref in chained work check

Securityx86/mm: Drop unnecessary PMD page copy when freeing

Securityxen/gntalloc: validate grant count before allocation

Securityxen/netfront: don't leak the skb when xennet_fill_frags() fails

Securityxfs: fix exchange-range-to-eof file size exchange

Securityxfs: stop exchanging reflink flags when exchanging mappings

SecurityAzure / Microsoft Entra

SecurityAzure DevOps

SecurityAzure3 source records

Published vulnerability · 3 entries

• Azure AI Foundry Elevation of Privilege Vulnerability

  Published vulnerability

  CVE-2026-108456

  Assessment context

  Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical

• Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability

  Published vulnerability

  CVE-2026-83938

  Assessment context

  Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical

• VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability

  Published vulnerability

  CVE-2026-110063

  Assessment context

  Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical

SecurityCloudflare2 source records

Security advisory · 2 entries

• WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Free Ruleset

  Security advisory · Cloudflare WAF changelog

  Assessment context

  Release notes name CVE-2026-109618, CVE-2026-109619

  CVE-2026-109618CVE-2026-109619
• WAF - WAF Release - 2026-10-22 - Emergency - Cloudflare Managed Ruleset

  Security advisory · Cloudflare WAF changelog

  Assessment context

  Release notes name CVE-2026-109618, CVE-2026-109619

  CVE-2026-109618CVE-2026-109619

SecurityExchange

SecurityFortinet

SecurityCisco Talos Intelligence

SecurityCisco6 source records

Security news · 6 entries

• Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities

  Security news · Cisco security advisories

• Multiple Cisco Products Snort 3 Denial of Service Vulnerability

  Security news · Cisco security advisories

• Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerability

  Security news · Cisco security advisories

SecurityDefender

SecurityMicrosoft Edge

Updates and guidanceDefender2 source records

Guidance changed · 2 entries

• Defender for Endpoint server onboarding

  Guidance changed

  32 new passages (about 450 words), 8 edited passages (142 words changed), 15 removed passages (about 410 words). The changed wording mentions dates and deadlines, defaults, prerequisites, permissions, supported platforms, network endpoints, settings and controls, licensing. Review the source to confirm the effect.

  Assessment context

  32 new passages (about 450 words), 8 edited passages (142 words changed), 15 removed passages (about 410 words). The changed wording mentions dates and deadlines, defaults, prerequisites, permissions, supported platforms, network endpoints, settings and controls, licensing. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.

• Defender for Endpoint changes

  Guidance changed

  1 edited passage (17 words changed). No rule matched the changed words; review the source for its effect.

  Assessment context

  1 edited passage (17 words changed). No rule matched the changed words; review the source for its effect. · Observed documentation change; policy effect and environment availability need review.

SecurityFortinet

SecurityGitLab