Vendor changes, filtered for the people who have to act on them.

cisco-sa-oct2026-node-js-Jj3SQ19u · CVE-2026-111497, CVE-2026-105482, CVE-2026-105483 +1 · Impact: High — On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x.

Bulletin ID: 2026-166-AWS Publication Date: 11/06/2026 10:00 AM PST Description: We identified two issues in the Babelfish TDS protocol layer: - CVE-2026-119923: A memory-safety issue in the TDS connection-handshake handling could allow a remote, unauthenticated actor to affect the database process. - CVE-2026-119924: A memory-safety issue in the TDS remote-procedure-call request handling could allow a remote, authenticated actor to read adjacent process memory or cause a denial of service. Ref…

Bulletin ID: 2026-173-AWS Publication Date: 11/06/2026 09:00 AM PST Description: We identified CVE-2026-122193, an OS command injection issue in an example provided in the set-up documentation. The example included a script that creates AWS Systems Manager (SSM) documents (Rex-RO and Rex-RW) for running scripts on managed instances. Due to how the example script handled input parameters, a user with permissions to invoke the SSM document could supply crafted input that would run unintended oper…

SNWLID-2026-0014 · CVE-2026-77708, CVE-2026-77709 +5 · CVSS 8.8 · Impact: High — A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations. A session validation vulnerability has been identified in the SonicOS management interface, which in specific…

Enterprise customers, particularly in regulated industries and large distributed contact center environments operating across multiple business units, geographies, vendors, and service providers, require strict controls to ensure users can access only the recordings and transcripts relevant to their operational scope while maintaining appropriate supervisory and compliance visibility. This feature enables segmentation of interaction data by organizational boundaries such as Business Units, Team…

When vouchers are generated through bank reconciliation rules, financial dimensions from the selected bank account are merged with the financial dimensions defined on the reconciliation rule. Dimensions specified on the reconciliation rule take precedence, while any dimensions that aren't specified on the rule automatically default from the bank account. This enhancement enables a single voucher-generation rule to be reused across multiple bank accounts, reducing setup and maintenance effort wh…

AWS Agent Registry, available through Amazon Bedrock AgentCore, is now available in the AWS GovCloud (US-West) Region. AWS Agent Registry is a fully managed discovery service that gives your organization a central catalog for organizing, curating, and discovering resources. You can publish MCP servers, tools, agents, agent skills, and custom resources to a searchable registry, and control what becomes discoverable through an approval workflow. People and AI agents can then find the right tools…

You can now use Amazon MSK Replicator in the AWS GovCloud (US-East, US-West) Regions to replicate streaming data across Amazon MSK clusters and from external Apache Kafka clusters including on-premises, self-managed on AWS, or other cloud providers to Amazon MSK Provisioned clusters. MSK Replicator is a feature of Amazon MSK that automates data replication between Kafka clusters, eliminating the need to manage custom replication infrastructure or configure open-source tools. With MSK Replicator…

AWS Data Exports for Cost and Usage Report (CUR) 2.0 and AWS Cost Explorer now amortize the upfront fee for Amazon EC2 Capacity Blocks for ML across the duration of each reservation. You can see the amortized cost of each instance launched into a Capacity Block and the amortized cost of unused capacity, so you can attribute your upfront fee to the workloads that used it and identify capacity that went unused. Previously, a Capacity Block's upfront fee appeared as a single charge on the purchase…

Amazon Simple Email Service (Amazon SES) is now available in the Asia Pacific (New Zealand, Melbourne, Taipei, Thailand), Mexico (Central), EU (Spain). Customers can now use these new Regions to leverage Amazon SES to send emails and, if needed, to help manage data requirements. Amazon SES is a scalable, cost-effective, and flexible cloud-based email service that allows digital marketers and application developers to send marketing, notification, and transactional emails from within any applica…

Impact: Major — Resolved. Affected: Login, Status Components. This incident has been resolved.

Customers often issue a purchase order that sets how much they'll accept on each invoice for a time and material engagement. Until now, Dynamics 365 Project Operations had no place to record that amount, so project managers and billing teams tracked it in spreadsheets and checked invoices by hand, adding reconciliation work and the risk of disputes. You can now set an invoice amount limit for each billing period on a time and material contract line's invoice schedule: Enter the limit for each p…

Dynamics 365 Project Operations streamlines transaction processing by replacing separate transaction origin records with direct source document references on transaction records, including journal lines, actuals, and invoice line details. This approach reduces the database operations required to maintain links to originating time entries, expenses, and material usage logs, and enables the phased retirement of transaction origin record creation. GA date: December CY2026 Preview date: April CY2026

Business value Preboarding gives candidates a clear, consistent way to complete requirements before their first day. HR teams can reduce manual follow-ups, repeated data entry, and delays caused by incomplete information by using a structured process with configured validation and document requirements. A guided experience helps candidates understand what to do next, while HR administrators maintain a repeatable process that supports day-one readiness. Capability details Guided candidate steps:…

Business Value For trade counter and call center operations, orders often need to reach the warehouse quickly so that picking and fulfillment activities can begin without delay. Without a direct path from Commerce to the warehouse management system, staff must manually intervene on every order, which slows fulfillment and increases the risk of missed or delayed shipments. This feature removes that bottleneck by automatically releasing routine orders on a scheduled basis, eliminating repetitive…

Business value Every friction point in order capture adds time to each transaction and increases the risk of downstream errors. Context that has no field is lost. A customer order converts to a cash-and-carry sale when all lines are marked as carryout, which removes flexibility that trade counter staff depend on. Standing values such as a customer's purchase order number are retyped on every transaction. This release is designed to address those friction points. Feature detail Add notes during…

This feature provides label printing in Store Commerce. Store associates print labels in the store, either on demand or from a label print request sent by Commerce headquarters when prices or promotions change. Headquarters is where administrators configure label formats and the printers available to each store, and where headquarters users create and release those requests. The first release covers three stages. Set up in Commerce headquarters. An administrator defines label formats in the lab…

This feature provides reusable Model Context Protocol (MCP) tools for Store Commerce shift and cash management, exposing Commerce capabilities as structured actions that customers, partners, and developers can compose into agentic experiences. The tools enable agentic experiences to list a store's registers and drawers; scan current shift status, including open, suspended, blind-closed, and invalid shifts; list shifts opened in a requested period, including those now closed; retrieve structured…

Enable agents to execute reusable Work IQ recipes that coordinate supported tools and actions. GA date: November CY2026 Preview date: October CY2026

Enable Work IQ to use federated connectors for governed access to additional enterprise data sources. GA date: November CY2026 Preview date: October CY2026