No access to your tenant or devices. Every item links to its source. What this means
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
Updates and guidanceAmazon Web Services: 6 lists changed
IP ranges changed
6 lists changed: 4 no longer cover some addresses, 2 cover the same addresses (prefixes rewritten); 4 were published twice or more that day, each read by its latest change.
6 lists changed: 4 no longer cover some addresses, 2 cover the same addresses (prefixes rewritten); 4 were published twice or more that day, each read by its latest change.
Updates and guidanceGoogle: 4 lists changed
IP ranges changed
4 lists changed: 1 covers more addresses, 3 no longer cover some addresses; 4 were published twice or more that day, each read by its latest change.
4 lists changed: 1 covers more addresses, 3 no longer cover some addresses; 4 were published twice or more that day, each read by its latest change.
Updates and guidanceOkta: 38 lists changed
IP ranges changed
38 lists changed: 17 cover more addresses, 21 no longer cover some addresses; 30 were published twice or more that day, each read by its latest change.
38 lists changed: 17 cover more addresses, 21 no longer cover some addresses; 30 were published twice or more that day, each read by its latest change.
Security.NET and Visual Studio Remote Code Execution Vulnerability
Affected-version evidence changed
CVE-2026-70197
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Security.NET
Published vulnerability
CVE-2026-114148
Microsoft states that customer action is required
Security1999AZZAR designer-mcp MCP motion-dev-guidelines.md get_reference path traversal
Newly collected advisory
CVE-2026-116045
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityASP.NET Core Remote Code Execution Vulnerability
Affected-version evidence changed
CVE-2026-102870
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityAlfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection
Newly collected advisory
CVE-2026-116058
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityCVE-2026-40372
EPSS crossed the 10% policy threshold
FIRST's predicted 30-day exploitation probability rose from below 10% to at least 10%. Prediction is not proof of exploitation.
SecurityCa-certificates: distrust emudhra intermediate ca certificates due to security concerns
Affected-version evidence changed
CVE-2026-114406
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityChikkili Google Pay for WooCommerce <= 1.0.6 - Unauthenticated Payment Confirmation Forgery via Unverified Signature
Newly collected advisory
CVE-2026-94295
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityCloudflare
Security advisory · Cloudflare WAF changelog
Release notes name CVE-2026-111497
SecurityContact Form by Supsystic < 1.8.0 - Admin+ Stored XSS
Newly collected advisory
CVE-2025-15705
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityContrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection
Newly collected advisory
CVE-2026-116197
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityDatawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Role Headers
Newly collected advisory
CVE-2026-115214
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityDedeCMS update_guide.php require_once code injection
Newly collected advisory
CVE-2026-116063
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityDistrust compromised intermediate certificates in ssl module
Affected-version evidence changed
CVE-2026-115557
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityDocker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/config
Newly collected advisory
CVE-2026-116070
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityDokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router
Newly collected advisory
CVE-2026-116068
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityDuplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click Upgrade
Newly collected advisory
CVE-2026-115251
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityFirecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service
Newly collected advisory
CVE-2026-116066
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_addresses
Newly collected advisory
CVE-2026-111981
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import
Newly collected advisory
CVE-2026-111978
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityGiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability Grant
Newly collected advisory
CVE-2026-111980
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.