Security fixes

A list of security problems that have been addressed in this release.

• ENG-771: Updated system dependencies to resolve CVE-2026-3805.
• ENG-809: Resolved an inconsistency between Alert Playbooks user interface (UI) behavior and RBAC enforcement.
• ENG-943: Updated system dependencies to solve CVE-2025-69720.
• ENG-992: Updated system dependencies to resolve:
  • CVE-2026-4247
  • CVE-2026-4747
  • CVE-2026-4748
• ENG-1016: Updated dependencies to solve CVE-2026-33671.
• ENG-1051: Arc can now be deployed using Windows Remote Management (WinRM) over hypertext transfer protocol secure (HTTPS) on port 5986/transmission control protocol (TCP).
• ENG-1104: Updated dependencies to solve CVE-2026-4800.
• ENG-1131: Updated dependencies to solve:
  • CVE-2026-34785
  • CVE-2026-34827
  • CVE-2026-34829
• ENG-1151: Updated dependencies to solve:
  • CVE-2026-31932
  • CVE-2026-31933
  • CVE-2026-31935
  • CVE-2026-31937
• ENG-1209: Upgraded the OpenSSL version in the container edition to address the following vulnerabilities:
  • CVE-2025-15467
  • CVE-2025-68160
  • CVE-2025-69418
  • CVE-2025-69419
  • CVE-2025-69420
  • CVE-2025-69421
  • CVE-2026-22795
  • CVE-2026-22796
• ENG-1226: Updated dependencies to solve CVE-2026-39324.
• ENG-1227: Updated dependencies to solve CVE-2026-35611.
• ENG-1237: Updated dependencies to solve:
  • CVE-2026-33815
  • CVE-2026-33816
• ENG-1348: Fixed multiple vulnerabilities in Nginx:
  • CVE-2026-1642
  • CVE-2026-27654
  • CVE-2026-27784
  • CVE-2026-32647
  • CVE-2026-27651
  • CVE-2026-28753
  • CVE-2026-28755
• ENG-1433: Improved the robustness of Smart Polling when it handles malformed network responses.
• ENG-1547: Updated dependencies to solve CVE-2026-41316.
• ENG-1549: Updated system dependencies to resolve:
  • CVE-2026-5398
  • CVE-2026-6386
  • CVE-2026-42511
  • CVE-2026-7270
  • CVE-2026-7164
  • CVE-2026-42512
  • CVE-2026-39457
  • CVE-2026-35547
• ENG-1866: Updated dependencies to solve CVE-2026-41907.
• ENG-1894: Updated operating system (OS) dependencies to address vulnerabilities:
  • CVE-2026-42945
  • CVE-2026-42946
  • CVE-2026-44432
  • CVE-2026-4519
  • CVE-2026-6473
  • CVE-2026-6475
  • CVE-2026-6476
  • CVE-2026-6477
  • CVE-2026-6479
  • CVE-2026-6637
• ENG-1990: Updated dependencies to address CVE-2026-45363.
• ENG-1991: Updated system dependencies to resolve:
  • CVE-2026-45250
  • CVE-2026-45251
  • CVE-2026-45252
  • CVE-2026-45253
  • CVE-2026-39461
  • CVE-2026-45255
  • CVE-2026-45254
• ENG-2020: Updated dependencies to address CVE-2026-9256.