ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. CriticalFortinet FortiMail Path Traversal Vulnerability Affected-version evidence changed: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMail 7.4.0 through 7.4.7, FortiMail 7.2.0 through 7.2.9, FortiMail 7.0 all vers…3 linked entries across history · in Security Follow evidence and connection reasons
  2. CriticalAtlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability Atlassian · exploited, added to CISA KEV3 linked entries across history · in Security Follow evidence and connection reasons
  3. CriticalEdge 145.0.3800.58: fixes CVE-2026-2441, exploited in the wild Google · exploited, added to CISA KEV: Google Chromium CSS Use-After-Free Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  4. CriticalOracle E-Business Suite Unspecified Vulnerability Security advisory: WAF - WAF Release - 2025-10-204 linked entries across history · in Security Follow evidence and connection reasons
  5. CriticalCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Security advisory: WAF - WAF Release - 2025-10-07 - Emergency3 linked entries across history · in Security Follow evidence and connection reasons
  6. CriticalCisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Security advisory: WAF - WAF Release - 2025-10-07 - Emergency3 linked entries across history · in Security Follow evidence and connection reasons
  7. CriticalEdge 137.0.3296.62: fixes CVE-2025-5419, exploited in the wild Google · exploited, added to CISA KEV: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  8. CriticalBarracuda Networks Multiple Products OS Command Injection Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  9. CriticalBarracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  10. CriticalCisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  11. CriticalGPUStack Improper Authentication Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  12. CriticalSignalWire FreeSwitch Code Injection Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  13. CriticalOpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  14. CriticalIBM Aspera Faspex Incorrect Authorization Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  15. CriticalSonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  16. CriticalApple Multiple Products Improper Authentication Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  17. CriticalIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability Newly collected advisory: Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.2 linked entries across history · in Security Follow evidence and connection reasons
  18. CriticalWordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  19. CriticalGitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability New CISA KEV listing observed2 linked entries across history · in Security Follow evidence and connection reasons
  20. CriticalApple Multiple Products Out-of-Bounds Write Vulnerability Affected-version evidence changed: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file m…2 linked entries across history · in Security Follow evidence and connection reasons
  21. CriticalGitLab Community Edition and Enterprise Edition Path Traversal Vulnerability Security advisory: WAF - WAF Release - 2026-09-302 linked entries across history · in Security Follow evidence and connection reasons
  22. CriticalWindows Update Stack Elevation of Privilege Vulnerability CISA KEV deadline: Microsoft Windows Link Following Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  23. CriticalWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability CISA KEV deadline: Microsoft Windows Heap-Based Buffer Overflow Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  24. CriticalCisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability Cisco · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  25. CriticalEdge 152.0.4191.66: fixes CVE-2026-87491, exploited in the wild Google · exploited, added to CISA KEV: Google Chromium V8 Out of Bounds Write Vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  26. CriticalEdge 152.0.4191.62: fixes CVE-2026-85046, exploited in the wild Google · exploited, added to CISA KEV: Google Chromium V8 Type Confusion Vulnerability2 linked entries across history · in Security Follow evidence and connection reasons
  27. CriticalBroadcom VMware vCenter Path Traversal Vulnerability Broadcom · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  28. CriticalFortinet FortiClient EMS SQL Injection Vulnerability Security advisory: WAF - WAF Release - 2026-04-152 linked entries across history · in Security Follow evidence and connection reasons
  29. CriticalGoogle Dawn Use-After-Free Vulnerability Google · exploited, added to CISA KEV2 linked entries across history · in Security Follow evidence and connection reasons
  30. CriticalFortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Security advisory: WAF - WAF Release - 2026-03-302 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 16:29 UTC · 265 of 275 readable · 263 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.