Weekly situation, week 38: 108 advisories, 26 critical

• IBM Guardium Data Protection: Bypassing security controls possible
• IBM Guardium Data Protection: one vulnerability
• IBM Guardium Data Protection: SQL injection possible
• IBM Guardium Data Protection: Code execution possible
• IBM MQ for HPE NonStop: Denial of service possible
• Synology DiskStation Manager (DSM): one vulnerability
• Google Chrome on: Memory corruption possible
• Google Chrome: Memory corruption possible
• CakePHP is a rapid development framework for PHP: SQL injection possible
• Cisco Identity Services Engine (ISE): several vulnerabilities
• API of Cisco Identity Services Engine (ISE): Bypassing security controls possible
• SXP REST API of Cisco ISE: SQL injection and denial of service possible
• REST API of Cisco ISE and Cisco ISE-PIC: Code execution with administrator privileges possible
• Cisco ISE: Denial of service possible
• diagnostic tools of Cisco ISE and ISE-PIC: Denial of service and code execution possible
• REST API of Cisco ISE and ISE-PIC: Denial of service and code execution possible
• web-based management interface of Cisco ISE: Denial of service possible
• Oracle Fusion Middleware: several vulnerabilities
• Google Chrome: one vulnerability
• Google Chrome: Memory corruption possible
• IBM MQ: one vulnerability
• IBM Verify Identity Access: Memory corruption possible
• PraisonAI is a multi-agent teams system: one vulnerability
• IBM Langflow OSS: Code execution with root privileges possible
• Cisco Secure Email Gateway: one vulnerability
• PraisonAI is a multi-agent teams system: one vulnerability

First check whether any of the systems named above is reachable from the internet at your site. If it is, the update belongs ahead of the regular maintenance window.