ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Hickory DNS from 0.18 before 0.26.2 Memory Amplification DoS via RR Counts Advisory content revised: Memory amplification from record counts in the DNS message header2 linked entries across history · in Security Follow evidence and connection reasons
  2. Hickory DNS from 0.26.0 before 0.26.2 Panic via TSIG RDATA Decoding Advisory content revised: Integer underflow when reporting a malformed TSIG record2 linked entries across history · in Security Follow evidence and connection reasons
  3. Hickory-dns 0.20.1 before 0.26.2 Panic DoS via SVCB/HTTPS Zone Parser Advisory content revised: Panic on a malformed `alpn` value when parsing SVCB or HTTPS records from text2 linked entries across history · in Security Follow evidence and connection reasons
  4. hickory-dns from 0.20.1 before 0.26.2 Panic in SVCB/HTTPS Zone File Parser Advisory content revised: Panic when an SVCB or HTTPS parameter value is a single quote character2 linked entries across history · in Security Follow evidence and connection reasons
  5. Dixell/Copeland XWEB EVO Hardcoded Administrator Backdoor Password Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  6. Dixell/Copeland XWEB EVO Predictable Administrator Password Generation Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  7. Dixell/Copeland XWEB EVO Predictable Root Password Generation Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  8. Dixell/Copeland XWEB EVO Pre-Auth OS Command Injection via Password Field Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  9. Dixell/Copeland XWEB EVO OS Command Injection via devices.lua Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  10. Dixell/Copeland XWEB EVO OS Command Injection via backup.lua Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  11. Dixell/Copeland XWEB EVO Unauthenticated Command Injection via xwconsole.cgi Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  12. Active Storage: Possible arbitrary file write and read in Active Storage image analysis Source marks advisory rejected: This CVE is a duplicate of another CVE.2 linked entries across history · in Security Follow evidence and connection reasons
  13. ibi WebFOCUS - Reflected XSS & OS Command Injection Vulnerability Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  14. A vulnerability that could allow an attacker to compromise a system. Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  15. Pre-authentication allocation from the keyboard-interactive response count Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  16. SSH message fields allocated before their size is checked Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  17. Android on supported Pixel devices before security patch level 2026-11-05 allows elevation of privilege in the hypervisor subcomponent in the kernel, aka A-519434175. Source marks advisory rejected: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.2 linked entries across history · in Security Follow evidence and connection reasons
  18. Terragrunt catalog predictable temp symlink clobber Advisory content revised: Terragrunt is a flexible orchestration tool that allows Infrastructure as Code written in OpenTofu or Terraform to scale. Prior to 1.1.1, the terragrunt catalog command derives a predictable per-repository catalog clone root under the share…2 linked entries across history · in Security Follow evidence and connection reasons
  19. Apache OFBiz: Pre-Authentication Remote Code Execution via Attacker-Controlled Screen Definition Loading Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  20. CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out) Advisory content revised: CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataStore table UI in src/resources/datastore-table-ui.ts accepts window message events without validating event.origin and sends JSON-RPC messages through…2 linked entries across history · in Security Follow evidence and connection reasons
  21. Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder Advisory content revised: Sliver is a command and control framework. Prior to 1.7.6, an HTTP(S) listener using the PNG encoder accepts attacker-controlled PNG dimensions without an effective decoded-size or pixel limit in util/encoders/images.go, while the listener …2 linked entries across history · in Security Follow evidence and connection reasons
  22. Apache OFBiz: Unauthenticated RCE via login-page widget injection Advisory content revised2 linked entries across history · in Security Follow evidence and connection reasons
  23. `Resolver::lookup` and `lookup_ip` returned records that failed DNSSEC validation Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  24. Word: Email Notification Context Previews for Files Protected with Microsoft Purview Cancelled2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  25. Microsoft Copilot (Microsoft 365): Expanded Agent Support in Copilot Notebooks Message Center · Plan for change: MC1550540: Microsoft 365 Copilot: Copilot Workspaces is replacing standalone agent selection with agentic chat2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  26. Microsoft Teams: Events in Meet app in Teams in GCC High and DoD Now rolling out2 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  27. undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation Advisory content revised: undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when a TLS 1.2 server renegotiates after the connection is established and presents a…6 linked entries across history · in Security Follow evidence and connection reasons
  28. Jira Software Data Center: Information Disclosure http-cache-semantics Dependency (CVE-2026-93748) Advisory content revised: http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can…6 linked entries across history · in Security Follow evidence and connection reasons
  29. MC1479277: Microsoft Copilot: New ways to work across Microsoft Copilot and Microsoft 365 Notice updated: MC1535647: Microsoft Copilot app: Updates to Home and navigation4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  30. Microsoft Copilot (Microsoft 365): [Copilot Extensibility] Users in GCC-H will be able to use custom engine agents Roadmap entry4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 12:08 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.