No access to your tenant or devices. Every item links to its source. What this means
Week 44 · 26 Oct – 26 Oct 2026 UTC · assess the changes, then plan the next dates.
Updates and guidanceDefender
Guidance changed
1 new passage (about 50 words). The changed wording mentions dates and deadlines, supported platforms. Review the source to confirm the effect.
1 new passage (about 50 words). The changed wording mentions dates and deadlines, supported platforms. Review the source to confirm the effect. · Observed documentation change; policy effect and environment availability need review.
Security2K Games Civilization V Lua Sandbox loadstring type confusion
Newly collected advisory
CVE-2026-116111
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityCloudClassroom-PHP-Project addnewstudent.php cross site scripting
Newly collected advisory
CVE-2026-116097
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityDatafeedr Product Sets Plugin AJAX Handlers ajax.php dfrps_ajax_delete_saved_search authorization
Newly collected advisory
CVE-2026-116107
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityDefault mimetype known files writeable on Windows
Affected-version evidence changed
CVE-2024-3220
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityDistrust compromised intermediate certificates in ssl module
Affected-version evidence changed
CVE-2026-115557
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityFlatpak: flatpak: arbitrary write access as root via extra-data extraction
Affected-version evidence changed
CVE-2026-96275
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityFlatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems
Affected-version evidence changed
CVE-2026-96280
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityFusion Creators Studio SCP Containment Breach Multiplayer Skynet++ Virtual Machine BlitzBanks out-of-bounds write
Newly collected advisory
CVE-2026-116099
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGiantappMan LiveWallPaper SignalR Hub UploadFile missing authentication
Newly collected advisory
CVE-2026-116110
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGouGuOA Api.php chunkUpload unrestricted upload
Newly collected advisory
CVE-2026-116113
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityHashenUdara edoc-doctor-appointment-system add-new.php sql injection
Newly collected advisory
CVE-2026-116112
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityHeyCyan App FileProvider access control
Newly collected advisory
CVE-2026-116106
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityHeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission
Newly collected advisory
CVE-2026-116105
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @drone-js-ext/core (npm)
Affected-version evidence changed
MAL-2026-18276
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @drone-js-ext/vip-badge (npm)
Affected-version evidence changed
MAL-2026-18277
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @greenlake/auth (npm)
Newly collected advisory
MAL-2026-18316
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @greenlake/common-context (npm)
Affected-version evidence changed
MAL-2026-18282
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @greenlake/context-pane (npm)
Newly collected advisory
MAL-2026-18317
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @greenlake/mfe-login-url (npm)
Newly collected advisory
MAL-2026-18318
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @greenlake/session (npm)
Affected-version evidence changed
MAL-2026-18283
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @regex33-hackerone/tb-compat (npm)
Newly collected advisory
MAL-2026-18310
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @s4yhiitestpoc/r2-control (npm)
Newly collected advisory
MAL-2026-18302
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @s4yhiitestpoc/r2-dns (npm)
Newly collected advisory
MAL-2026-18303
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.