ChangeIntelIT change radar
Public mode

No tenant, Graph, or device access. Every item links to its source. What this means

Some sources or documents need attention: 251/253 feeds/APIs · 391/391 docs · checked 02:34 UTC Customize Public modeDiscuss ChangeIntel on Discord

Security

CVE detail from Microsoft's public MSRC CVRF API, cross-checked with CISA's Known Exploited Vulnerabilities catalog. Counts cover Microsoft-issued CVEs; republished third-party CVEs such as Chromium or Linux are hidden unless you include them.

Security Update Guide CISA KEV

Exploited in other vendors' products

CISA KEV · Apple, Android, Chrome, Firefox, VMware, Oracle, Jamf · last 90 days
CVE-2026-104286 Fortinet · FortiMail
Fortinet FortiMail Path Traversal Vulnerability
Added 1 Oct 2026Fortinet
CVE-2026-76504 Cisco · Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Added 30 Sep 2026Cisco
CVE-2026-86950 Apple · Multiple Products
Apple Multiple Products Out-of-Bounds Write Vulnerability
Added 29 Sep 2026iOS and iPadOSmacOS
CVE-2026-58704 Google · Pixel
Google Pixel Improper Authorization Vulnerability
Added 16 Sep 2026Android
CVE-2026-76460 Cisco · Identity Services Engine
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
Added 16 Sep 2026Cisco
CVE-2026-76461 Cisco · Secure Email Gateway
Cisco Secure Email Gateway SQL Injection Vulnerability
Added 14 Sep 2026Cisco
CVE-2026-85706 GitLab · Community Edition and Enterprise Edition
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
Added 11 Sep 2026GitLab
CVE-2025-25249 Fortinet · Multiple Products
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Added 9 Sep 2026Fortinet
CVE-2026-20079 Cisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewa…
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
Added 9 Sep 2026Cisco
CVE-2026-87491 Google · Chromium V8
Google Chromium V8 Out of Bounds Write Vulnerability
Added 9 Sep 2026Google Chrome
CVE-2026-85046 Google · Chromium V8
Google Chromium V8 Type Confusion Vulnerability
Added 4 Sep 2026Google Chrome
CVE-2026-21962 Oracle · HTTP Server and Oracle Weblogic Server Proxy Plug-in
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
Added 24 Aug 2026Oracle WebLogic Server
CVE-2026-59310 Broadcom · VMware vCenterRansomware
Broadcom VMware vCenter Path Traversal Vulnerability
Added 18 Aug 2026VMware vCenter Server
CVE-2026-65400 Apple · macOS
Apple macOS Improper Authentication Vulnerability
Added 18 Aug 2026macOS
CVE-2026-20349 Cisco · Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat De…
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
Added 11 Aug 2026Cisco
CVE-2026-20316 Cisco · Secure Firewall Management Center (FMC)Ransomware
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Added 29 Jul 2026Cisco
CVE-2025-68686 Fortinet · FortiOS
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Added 27 Jul 2026Fortinet
CVE-2026-25089 Fortinet · FortiSandbox
Fortinet FortiSandbox OS Command Injection Vulnerability
Added 16 Jul 2026Fortinet
CVE-2026-39808 Fortinet · FortiSandbox
Fortinet FortiSandbox OS Command Injection Vulnerability
Added 16 Jul 2026Fortinet
CVE-2026-46817 Oracle · E-Business Suite
Oracle E-Business Suite Improper Privilege Management Vulnerability
Added 15 Jul 2026Oracle E-Business Suite
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Oct 02:34 UTC · 251 of 253 readable · 251 fully read · documentation 391/391 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.