Description of the security update for Microsoft Exchange Server 2016 CU23: August 11, 2026 (KB5121576)

None None...

August 11, 2026—KB5121000 (OS Build 28000.2704)

None None...

Description of the security update for Microsoft Exchange Server Subscription Edition RTM: August 11, 2026 (KB5121573)

None None...

August 11, 2026—KB5121003 (OS Builds 26200.9168 and 26100.9168)

None None...

August 11, 2026—Hotpatch KB5120994 (OS Builds 26200.9106 and 26100.9106)

None None...

August 11, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 (KB5120716)

None None...

August 11, 2026—KB5120418 (OS Build 14393.9418)

None None...

August 11, 2026—Hotpatch KB5120229 (OS Build 20348.5440)

None None...

Update 28.2 for Microsoft Dynamics 365 Business Central 2026 Release Wave 1 (Application Build 28.2.51034, Platform Build 28.0.50938)

None None...

Update 27.8 for Microsoft Dynamics 365 Business Central 2025 Release Wave 2 (Application Build 27.8.50894, Platform Build 27.0.50789)

None None...

August 11, 2026-KB5120705 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2022

None None...

August 11, 2026-Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 (KB5120704)

None None...

August 11, 2026-KB5120701 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H2 and Windows 10 Version 22H2

None None...

DEBIAN-CVE-2026-72746

FreeRDP before 3.30.0 contains a server-side authentication bypass in the RDSTLS handshake. When a server is configured with RdstlsSecurity = TRUE, the handshake dispatches inbound PDUs based solely on the attacker-supplied wire pduType without verifying that the received PDU is the one required ...

DEBIAN-CVE-2026-72745

FreeRDP before 3.30.0 contains an out-of-bounds vulnerability in kerberosDecryptMessage winpr/libwinpr/sspi/Kerberos/kerberos.c. The 16-bit EC extra count field of a peer-supplied GSS Wrap token RFC 4121 is used directly in pointer arithmetic to locate the encrypted regions without being...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libtiff: libtiff-4.7.2-2.hum1 aarch64, x8664 libtiff-devel-4.7.2-2.hum1 aarch64, x8664 libtiff-static-4.7.2-2.hum1 aarch64, x8664 libtiff-tools-4.7.2-2.hum1 aarch64, x8664 libtiff-4.7.2-2.hum1.sr...

CVE-2026-50060

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker ...

CVE-2026-13737

CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X...

CLSA-2026-1786449156 TuxCare security update for commons-fileupload:commons-fileupload (2 CVEs)

TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.3.1-tuxcare.2...

CVE-2026-72595

CVE-2026-72595 : In BadChoice Handesk, the vulnerability affects the TicketsController@update endpoint where no authorization check is performed and no team-scoped ownership is enforced. This allows any authenticated agent to update ticket records belonging to other teams, enabling modification, ...