Skip to content
TrustList

TrustList daily digest · Tech and security

Monday, 5 October 2026

Tech and security: the stories TrustList published on this day, each in a line of our own. Open a story for the whole piece and its sources.

Tech and security3

  1. 1Security advisories

    Dell System Update 2.3.0.0 fixes a critical unauthenticated root code-execution flaw (CVE-2026-86360) and four high-severity bugs

    Dell advisory DSA-2026-324 covers five flaws in the Dell System Update (DSU) tool used to push firmware to PowerEdge servers. Every version before 2.3.0.0 is affected; Dell has not reported exploitation.

  2. 2Security advisories

    AWS bulletins: EFS CSI Driver mount-option injection (CVE-2026-103505, fixed in 3.5.0) and GluonTS code execution (CVE-2026-100308, fixed in 0.17.0)

    AWS bulletins fix a mount-option injection flaw in the Amazon EFS CSI Driver for Kubernetes (versions 3.1.0 to 3.4.2, fixed in 3.5.0) and arbitrary command execution when GluonTS loads untrusted model directories (before 0.17.0).

  3. 3Security advisories

    Rejetto HFS session-forgery flaw CVE-2026-61500 now targeted by attackers: upgrade to 3.2.1 or later

    VulnCheck reports exploitation attempts against a critical Rejetto HFS flaw that lets an attacker forge administrator sessions and run code. HFS 3.2.1 fixed it on 13 July; versions 3.0.0 to 3.2.0 are reported as affected.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.

We will email you to confirm. Unsubscribe with one click in any issue. Privacy policy