Weakness CWE-20

Update PHP Group PHP to the vendor's latest patched build for CVE-2026-109618 and enforce network isolation.

Update PHP Group PHP to the vendor's latest patched build for CVE-2026-109619 and enforce network isolation.

Update Google Brotli to the latest Stable channel build and restart the browser (CVE-2026-111497).

Upgrade GitLab CE/EE to the patched security release addressing CVE-2026-97229.

Update Adobe Commerce and Magento to the latest APSB security release addressing CVE-2026-48356.

Update the Linux kernel package via your distro security repo and reboot to load the CVE-2026-46300 fix.

Upgrade Safari to >= 17.5 (CVE-2024-27834 vendor patch).

Update the affected WordPress Core plugin/core to the patched release for CVE-2026-119977 and rotate admin keys.

Apply the Arista security hotfix for VeloCloud Orchestrator (CVE-2026-114625) and segment management ports off the internet.

Apply the Ivanti security hotfix for Connect Secure (CVE-2026-118527) and segment management ports off the internet.

Upgrade Secure Firewall ASA Software and Cisco Secure FTD Software to Cisco's fixed software release for CVE-2026-76418 and restrict admin interfaces.

Update Broadcom VMware ESX to the vendor's latest patched build for CVE-2026-41709 and enforce network isolation.

Apply the Ivanti security hotfix for Connect Secure (CVE-2026-111357) and segment management ports off the internet.

Upgrade ADC to >= 14.1-73.37 (CVE-2026-88771 vendor patch).