ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Jira Software Data Center: SSRF (Server-Side Request Forgery) fast-uri Dependency (CVE-2026-84292) Advisory content revised: fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can …5 linked entries across history · in Security Follow evidence and connection reasons
  2. .NET Denial of Service Vulnerability Advisory content revised: Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.4 linked entries across history · in Security Follow evidence and connection reasons
  3. Jira Software Data Center: DoS (Denial of Service) immutable Dependency (CVE-2026-59879) Advisory content revised: Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 ** 30 to 2 *…4 linked entries across history · in Security Follow evidence and connection reasons
  4. .NET Information Disclosure Vulnerability Advisory content revised: Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.4 linked entries across history · in Security Follow evidence and connection reasons
  5. Jira Software Data Center: Information Disclosure axios Dependency (CVE-2026-67320) Advisory content revised: axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by creating a null-prototype object, but request interceptors run after the merge; a co…4 linked entries across history · in Security Follow evidence and connection reasons
  6. Jira Software Data Center: DoS (Denial of Service) brace-expansion Dependency (CVE-2026-69152) Advisory content revised: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded se…4 linked entries across history · in Security Follow evidence and connection reasons
  7. .NET Denial of Service Vulnerability Advisory content revised: Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.4 linked entries across history · in Security Follow evidence and connection reasons
  8. ASP.NET Core Elevation of Privilege Vulnerability Advisory content revised: Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.4 linked entries across history · in Security Follow evidence and connection reasons
  9. Jira Software Data Center: SSRF (Server-Side Request Forgery) fast-uri Dependency (CVE-2026-75899) Advisory content revised: fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time during authority recomposition, so a single call to normalize or resolve can turn nested percen…4 linked entries across history · in Security Follow evidence and connection reasons
  10. .NET Denial of Service Vulnerability Advisory content revised: Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.4 linked entries across history · in Security Follow evidence and connection reasons
  11. ASP.NET Core Tampering Vulnerability Advisory content revised: Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.4 linked entries across history · in Security Follow evidence and connection reasons
  12. .NET Elevation of Privilege Vulnerability Advisory content revised: Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.4 linked entries across history · in Security Follow evidence and connection reasons
  13. ASP.NET Core Remote Code Execution Vulnerability Advisory content revised: Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.4 linked entries across history · in Security Follow evidence and connection reasons
  14. .NET Elevation of Privilege Vulnerability Advisory content revised: Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.4 linked entries across history · in Security Follow evidence and connection reasons
  15. ASP.NET Core Denial of Service Vulnerability Advisory content revised: Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.4 linked entries across history · in Security Follow evidence and connection reasons
  16. .NET Denial of Service Vulnerability Advisory content revised: Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.4 linked entries across history · in Security Follow evidence and connection reasons
  17. .NET Denial of Service Vulnerability Advisory content revised: Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.4 linked entries across history · in Security Follow evidence and connection reasons
  18. .NET Denial of Service Vulnerability Advisory content revised: Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.4 linked entries across history · in Security Follow evidence and connection reasons
  19. Cloudflare: Spectrum Availability issues Ongoing incident3 linked entries across history · in Other vendors Follow evidence and connection reasons
  20. Microsoft 365: PAYGO consumption-based meter for your extra SharePoint storage needs Notice updated: MC1330893: (Updated) Pay-as-you-go consumption-based meter for your extra SharePoint storage needs3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  21. Microsoft Copilot (Microsoft 365): Use Agent 365 agents within Microsoft 365 Copilot Chat and Declarative Agents Notice updated: MC1478975: (Updated) Microsoft 365 Copilot: Use Microsoft Agent 365 agents as connected agents in declarative agents3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  22. Word: Legal plugins in Copilot Notice updated: MC1509799: Microsoft 365 Copilot: Legal plugins in Word and Cowork3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  23. GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments Advisory content revised: GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. From 10.10.1 until 12.0.2, the @graphql-tools/utils mergeIncrementalResult helper passes incrementalResult.path segments to setObjectKeyPath without runt…2 linked entries across history · in Security Follow evidence and connection reasons
  24. Stored XSS attacks occur when an attacker injects a malicious script in Global Smart Folders feature in NIOS Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  25. SIPSorcery: Unbounded SCTP SACK gap/duplicate counts cause out-of-bounds read that kills the data-channel receive thread (DoS) Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  26. Signal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and remote code execution Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  27. Dynatrace MCP Server: Workflow template injection via create_workflow_for_notification Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  28. Dynatrace MCP Server: DQL injection via parameters not documented as DQL Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  29. Dynatrace MCP Server: Unauthenticated HTTP MCP Tool Invocation in `@dynatrace-oss/dynatrace-mcp-server` Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  30. Muhammara: NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 13:11 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.