ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 271/271 feeds/APIs · 464/464 docs · 8/9 advisories · checked 20:05 UTC Customize Public modeDiscuss ChangeIntel on Discord

Weekly briefing

Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.

All dated changes in this period

1121 source records · 1006 groups
Clear list filters

Security.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Affected-version evidence changed

CVE-2026-70197

Assessment context

Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

SecurityASP.NET Core Remote Code Execution Vulnerability

ASP.NET Core Remote Code Execution Vulnerability

Affected-version evidence changed

CVE-2026-102870

Assessment context

Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

SecurityAshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows

AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows

Newly collected advisory

CVE-2026-115627

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityCVE-2026-40372

CVE-2026-40372

EPSS crossed the 10% policy threshold

Assessment context

FIRST's predicted 30-day exploitation probability rose from below 10% to at least 10%. Prediction is not proof of exploitation.

SecurityContact Form by Supsystic < 1.8.0 - Admin+ Stored XSS

Contact Form by Supsystic < 1.8.0 - Admin+ Stored XSS

Newly collected advisory

CVE-2025-15705

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityDedeCMS update_guide.php require_once code injection

DedeCMS update_guide.php require_once code injection

Newly collected advisory

CVE-2026-116063

Assessment context

Newly collected advisory; observed by ChangeIntel, not the original publication date.

SecurityDistrust compromised intermediate certificates in ssl module

Distrust compromised intermediate certificates in ssl module

Affected-version evidence changed

CVE-2026-115557

Assessment context

Affected-version evidence changed; observed by ChangeIntel, not the original publication date.

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 25 Oct 20:05 UTC · 271 of 271 readable · 269 fully read · documentation 464/464 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.