ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Connected evidence

Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.

Saved searches 0

Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.

Threads

Related changes across sources
  1. Sender WordPress Plugin < 2.11.3 Broken Access Control via admin_post_sender_debug_download Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  2. Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761) Newly collected advisory2 linked entries across history · in Security Follow evidence and connection reasons
  3. Tanium addressed an improper certificate validation vulnerability in multiple products Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  4. Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  5. Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  6. Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  7. Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  8. Samba: missing access check on reparse point operations Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  9. Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  10. Gnutls: gnutls: denial of service via dtls packet reordering vulnerability Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  11. Gnutls: gnutls: authentication bypass via nul character in username Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  12. Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  13. Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  14. Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
  15. Control Web Panel (CWP) < 1.12 Authentication Bypass via Execution After Redirect Source changes critical severity rating: Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex4 linked entries across history · in Security Follow evidence and connection reasons
  16. Microsoft Teams: Multi-line call history tabs in the Calls app Now rolling out4 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  17. Control Web Panel (CWP) < 1.30 OS Command Injection via valid_token Affected-version evidence changed: Control Web Panel (CWP) < 1.29 OS Command Injection via valid_token3 linked entries across history · in Security Follow evidence and connection reasons
  18. .NET and Visual Studio Remote Code Execution Vulnerability Source adds a fixed version: Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability3 linked entries across history · in Security Follow evidence and connection reasons
  19. Control Web Panel (CWP) < 1.16 Path Traversal LFI via module Parameter Advisory content revised: Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.php3 linked entries across history · in Security Follow evidence and connection reasons
  20. Control Web Panel (CWP) < 1.16 File Write and Command Injection Advisory content revised: Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor3 linked entries across history · in Security Follow evidence and connection reasons
  21. Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directory Source changes critical severity rating3 linked entries across history · in Security Follow evidence and connection reasons
  22. Control Web Panel (CWP) < 1.30 Unauthenticated Loopback API Root Access Affected-version evidence changed: Control Web Panel (CWP) < 1.29 Unauthenticated Loopback API Root Access3 linked entries across history · in Security Follow evidence and connection reasons
  23. Control Web Panel (CWP) < 1.30 OS Command Injection via restoredatabase API Affected-version evidence changed: Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase API3 linked entries across history · in Security Follow evidence and connection reasons
  24. Control Web Panel (CWP) < 1.30 Blind SQL Injection via user Parameter Affected-version evidence changed: Control Web Panel (CWP) < 1.29 Blind SQL Injection via user Parameter3 linked entries across history · in Security Follow evidence and connection reasons
  25. Microsoft Teams: AI-generated meeting memory for knowledge retention (formerly AI-generated meeting archive) Date moved later3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  26. Microsoft Purview: Data Loss Prevention - Unmanaged cloud app discovery and protection with Microsoft Purview and Palo Alto Prisma Access Date moved later3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  27. Microsoft Teams: SharePoint app in Teams Now rolling out3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  28. Microsoft Teams: App centric management in Teams Admin Center to manage the Apps access for tenants, end-users, and groups in GCC High Now rolling out3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  29. Microsoft Teams: App centric management in Teams Admin Center to manage the Apps access for tenants, end-users, and groups in DoD Now rolling out3 linked entries across history · in Microsoft 365 Follow evidence and connection reasons
  30. Apache Airflow: RCE by race condition in example_xcom dag Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 08:15 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.