Security Notes
The following security vulnerabilities have been addressed.
C2026.10.0
| Vulnerability Name/CVE-ID | CVSS Rating | Subject | Issue Type | JIRA |
|---|---|---|---|---|
| CVE-2026-91403 | Critical | Security Update | Package | DEVOPS-11167 (see note below) |
| CVE-2025-59250, CVE-2026-86145, CVE-2026-89161, GHSA-9PWP-9QQC-PR26, GHSA-QP49-QGX5-5M26 | Critical | Security Update | Package | DEVOPS-10754 |
| CVE-2026-84939, CVE-2025-59250, CVE-2026-103111, CVE-2026-86145, CVE-2026-89161, GHSA-9PWP-9QQC-PR26, GHSA-7HHH-6RMP-J9QF, GHSA-CXP5-3PX4-PW24, GHSA-P6PP-M3F8-5C89, GHSA-Q4XH-88C3-WMH7, GHSA-QP49-QGX5-5M26, GHSA-WV8Q-QHHJ-9H54 | Critical | Security Update | Package | DEVOPS-10822 |
| GHSA-VCVR-R3JV-PC5J | Critical | Security Update | Package | ATSCALE-54436 |
| CVE-2026-102268, CVE-2026-102266, CVE-2026-102267, CVE-2026-102271, CVE-2026-102272, CVE-2026-102273, GHSA-FFC3-869F-JXW9, GHSA-9J54-FG26-WV3R, GHSA-9V7F-9G4P-FFGJ, GHSA-P4G4-X82P-Q773, GHSA-R6X4-923Q-G947, GHSA-W2CX-738M-MC7W | Critical | Security Update | Package | ATSCALE-54438 |
| GHSA-JQCG-44MW-7W3H | Critical | Security Update | Package | ATSCALE-54466 |
| GHSA-8R5X-FM3F-WHWJ, GHSA-P8WG-VRV2-V86F | Critical | Security Update | Package | ATSCALE-54673 |
| CVE-2026-78669 | Critical | Security Update | Package | DEVOPS-11051 |
| CVE-2026-111943, CVE-2026-78667, CVE-2026-78669, CVE-2026-97031, GO-2026-6604, GO-2026-6612, GO-2026-6603, GO-2026-6605, GO-2026-6607, GO-2026-6608, GO-2026-6609, GO-2026-6610, GO-2026-6611, GO-2026-6613, GO-2026-6617 | Critical | Security Update | Package | DEVOPS-11052 |
| CVE-2026-19445, CVE-2026-19553 | Critical | Security Update | Package | ATSCALE-54675 |
| GHSA-6Q48-6C7W-9GW2 | Critical | Security Update | Package | ATSCALE-55339 |
| CVE-2026-94482, GHSA-2464-FHR4-W9XW, GHSA-673Q-MJM6-R5XR, GHSA-P3M5-59MP-JV5R | Critical | Security Update | Package | ATSCALE-55453 |
| CVE-2026-114406, CVE-2026-91403, CVE-2026-103111, CVE-2026-86145, CVE-2026-89161, CVE-2026-91415, GHSA-XXPH-C9WW-HJ94 | Critical | Security Update | Package | DEVOPS-11029 |
| CVE-2025-59250, CVE-2026-54512, CVE-2026-54513, GHSA-558V-64GR-WGG4, GHSA-6JQX-86GH-F27W, GHSA-J3RV-43J4-C7QM, GHSA-J92G-9F8W-J867, GHSA-JPPX-W49H-X2QQ, GHSA-MVH2-CRG5-V77C, GHSA-Q6CQ-MHR2-JMR5, GHSA-R7WM-3CXJ-WFF9, GHSA-RMJ7-2VXQ-3G9F | High | Security Update | Package | DEVOPS-10511 |
| CVE-2026-41254, CVE-2026-47063, CVE-2026-62574, BIT-JRE-2026-41254, BIT-JRE-2026-47063, BIT-JRE-2026-62574 | High | Security Update | Package | DEVOPS-10525 |
| CVE-2026-33818, CVE-2026-39821, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862, CVE-2026-56864, CVE-2026-56865, GO-2026-5026, GO-2026-5942, GO-2026-5972, GO-2026-6088, GO-2026-6089, GO-2026-6090 | High | Security Update | Package | DEVOPS-10529 |
| CVE-2026-33818, CVE-2026-39821, CVE-2026-39822, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862 | High | Security Update | Package | DEVOPS-10530 |
| GHSA-MH99-V99M-4GVG, GHSA-RGW5-RVV9-X895 | High | Security Update | Package | ATSCALE-52497 |
| CVE-2026-73088, CVE-2026-73089, GHSA-73WF-GQ98-2V4G, GHSA-C83G-RGW3-J3CX | High | Security Update | Package | ATSCALE-52498 |
| CVE-2026-75899, CVE-2026-75931, CVE-2026-75975, CVE-2026-76172 | High | Security Update | Package | ATSCALE-52499 |
| CVE-2026-73088, CVE-2026-73089, GHSA-73WF-GQ98-2V4G, GHSA-C83G-RGW3-J3CX | High | Security Update | Package | ATSCALE-52502 |
| CVE-2026-75899, CVE-2026-75931, CVE-2026-75975, CVE-2026-76172 | High | Security Update | Package | ATSCALE-52503 |
| CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669, CVE-2026-14670, CVE-2026-14671, CVE-2026-14676, CVE-2026-14677, CVE-2026-14679, CVE-2026-14680, CVE-2026-15741, CVE-2026-15742, CVE-2026-16238, CVE-2026-16239, CVE-2026-18408, CVE-2026-19385, CVE-2026-6464, CVE-2026-6471 | High | Security Update | Package | ATSCALE-52506 |
| GHSA-82X6-Q7MM-W9CF, GHSA-V5MP-JGW5-2X6J | High | Security Update | Package | ATSCALE-52559 |
| GHSA-6C5V-HQJR-5XXP, GO-2026-6354, GO-2026-6355 | High | Security Update | Package | DEVOPS-10599 |
| CVE-2026-84375 | High | Security Update | Package | ATSCALE-52641 |
| CVE-2026-77037, CVE-2026-77078, CVE-2026-82333 | High | Security Update | Package | ATSCALE-52642 |
| GHSA-F88M-G3JW-G9CJ, GHSA-RGJ7-G3M4-5G8C | High | Security Update | Package | ATSCALE-52645 |
| GHSA-7Q85-XJ36-VMFC | High | Security Update | Package | ATSCALE-52990 |
| GHSA-HF6X-8P5F-CGMF | High | Security Update | Package | ATSCALE-53163 |
| GHSA-V3JC-474W-2WM6 | High | Security Update | Package | ATSCALE-53164 |
| CVE-2026-56864, CVE-2026-56865 | High | Security Update | Package | DEVOPS-10808 |
| CVE-2026-33818, CVE-2026-39821, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862, GO-2026-5026, GO-2026-5942, GO-2026-5972, GO-2026-6088, GO-2026-6090 | High | Security Update | Package | DEVOPS-10809 |
| CVE-2023-52356, CVE-2026-4775, CVE-2026-85091, CVE-2026-93990 | High | Security Update | Package | DEVOPS-10810 |
| GHSA-58MR-GQGX-XQ4G, GHSA-QW65-CVWX-89V3 | High | Security Update | Package | ATSCALE-53769 |
| CVE-2026-103111, CVE-2026-54873, CVE-2026-72897, CVE-2026-84782, CVE-2026-84784, CVE-2026-85091 | High | Security Update | Package | DEVOPS-10889 |
| CVE-2026-75804, CVE-2026-84782 | High | Security Update | Package | ATSCALE-54431 |
| GHSA-M9GG-HP2V-232J | High | Security Update | Package | ATSCALE-54432 |
| GHSA-3PQ3-5FJ3-CG6V, GHSA-542G-H47M-68V8, GHSA-C29M-XWM3-CM6R, GHSA-M8M8-QJ5V-23W3, GHSA-MGHH-PGCX-3JJJ, GHSA-R4GJ-5M52-G5WH, GHSA-X97P-JQ2G-JP4F | High | Security Update | Package | ATSCALE-54433 |
| CVE-2026-102276, CVE-2026-102278, GHSA-6J4F-FJ2G-MC7P, GHSA-QHR7-859C-M2P7 | High | Security Update | Package | ATSCALE-54434 |
| CVE-2026-75804, CVE-2026-84782 | High | Security Update | Package | ATSCALE-54435 |
| CVE-2026-56864, CVE-2026-56865 | High | Security Update | Package | DEVOPS-10998 |
| CVE-2026-46600, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862 | High | Security Update | Package | DEVOPS-10999 |
| GHSA-8988-9CW3-XX77, GHSA-VXQ7-64XX-V4GW | High | Security Update | Package | ATSCALE-54439 |
| GHSA-68FV-2MGG-JV7Q | High | Security Update | Package | ATSCALE-54467 |
| GHSA-WQ5F-XC86-PV6W | High | Security Update | Package | ATSCALE-54469 |
| CVE-2026-56864, CVE-2026-56865 | High | Security Update | Package | DEVOPS-11027 |
| CVE-2026-78667, CVE-2026-78669, CVE-2026-97031 | High | Security Update | Package | DEVOPS-11053 |
| CVE-2026-78667, CVE-2026-78669, CVE-2026-97031 | High | Security Update | Package | DEVOPS-11054 |
| CVE-2026-111755, CVE-2026-111756 | High | Security Update | Package | ATSCALE-55285 |
| CVE-2026-66046, CVE-2026-76956, CVE-2026-76957, CVE-2026-77214, CVE-2026-93990 | High | Security Update | Package | ATSCALE-55289 |
| CVE-2026-111943 | High | Security Update | Package | DEVOPS-11139 |
| CVE-2026-111943 | High | Security Update | Package | DEVOPS-11143 |
| CVE-2026-111943 | High | Security Update | Package | DEVOPS-11145 |
| GHSA-MCR4-QMVW-PX4G | High | Security Update | Package | ATSCALE-55436 |
| CVE-2026-89407, CVE-2026-89425, GHSA-7HHH-6RMP-J9QF, GHSA-P6PP-M3F8-5C89 | High | Security Update | Package | ATSCALE-55437 |
| CVE-2026-91776, CVE-2026-91777, GHSA-CXP5-3PX4-PW24, GHSA-Q4XH-88C3-WMH7, GHSA-WV8Q-QHHJ-9H54 | High | Security Update | Package | ATSCALE-55438 |
| CVE-2026-114141, CVE-2026-114143, CVE-2026-114144 | High | Security Update | Package | ATSCALE-55451 |
Note
The engine container image now runs Eclipse Temurin 25.0.5, the October 2026 Java update. It also blocks the compromised eMudhra intermediate certificate authorities (CVE-2026-91403), so TLS connections whose certificate chains go through one of those intermediates are now rejected. (DEVOPS-11167)