# \#security-alert **URL:** https://community.cumulocity.com/tag/security-alert/1599.md [Latest](https://community.cumulocity.com/latest.md) · [Categories](https://community.cumulocity.com/categories.md) · [Tags](https://community.cumulocity.com/tags.md) --- ## [Security Alert: Critical Security Vulnerability Identified in Cumulocity Microservices](https://community.cumulocity.com/t/security-alert-critical-security-vulnerability-identified-in-cumulocity-microservices/15229)
**Author:** [@c8y\_security](https://community.cumulocity.com/u/c8y_security)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 6:01am UTC](https://community.cumulocity.com/t/security-alert-critical-security-vulnerability-identified-in-cumulocity-microservices/15229 "2026-10-06T06:01:01Z")
Date: 6 October 2026 Severity: Critical Audience: Operators of Cumulocity environments Applies to: Yearly releases and Edge Action required: Upgrade the environment or, at minimum, the specified microservices. Over… --- ## [Security Advisory: Vulnerabilities in WebSDK @c8y/bootstrap package](https://community.cumulocity.com/t/security-advisory-vulnerabilities-in-websdk-c8y-bootstrap-package/15179)
**Author:** [@c8y\_security](https://community.cumulocity.com/u/c8y_security)\ **Replies:** 0\ **Last updated:** [September 10, 2026, 1:06pm UTC](https://community.cumulocity.com/t/security-advisory-vulnerabilities-in-websdk-c8y-bootstrap-package/15179 "2026-09-10T13:06:09Z")
Date: 10th September 2026 Severity: Critical/ High Audience: Developers building custom applications using Web SDK & Cumulocity environment owners Action Required: Update custom applications and plugins & upgrade en… --- ## [Security Advisory: Vulnerabilities in WebSDK](https://community.cumulocity.com/t/security-advisory-vulnerabilities-in-websdk/15075)
**Author:** [@c8y\_security](https://community.cumulocity.com/u/c8y_security)\ **Replies:** 0\ **Last updated:** [July 28, 2026, 11:25am UTC](https://community.cumulocity.com/t/security-advisory-vulnerabilities-in-websdk/15075 "2026-07-28T11:25:23Z")
Date: 28th July 2026 Severity: Critical/ High Audience: Developers building custom applications using Web SDK & Cumulocity environment owners Action Required: Update custom applications and plugins & upgrade environ… --- ## [Security Advisory: Critical Security Update for Web SDK](https://community.cumulocity.com/t/security-advisory-critical-security-update-for-web-sdk/14428)
**Author:** [@c8y\_security](https://community.cumulocity.com/u/c8y_security)\ **Replies:** 1\ **Last updated:** [March 31, 2026, 3:37pm UTC](https://community.cumulocity.com/t/security-advisory-critical-security-update-for-web-sdk/14428 "2026-03-31T15:37:16Z")
Date: 31st March 2026 Severity: Critical Audience: Developers building custom applications using Web SDK & Cumulocity environment owners Action Required: Update custom applications and plugins & upgrade environments … --- ## [Critical Security Vulnerability Identified in Cumulocity Platform](https://community.cumulocity.com/t/critical-security-vulnerability-identified-in-cumulocity-platform/14109)
**Author:** [@c8y\_security](https://community.cumulocity.com/u/c8y_security)\ **Replies:** 0\ **Last updated:** [December 11, 2025, 5:50pm UTC](https://community.cumulocity.com/t/critical-security-vulnerability-identified-in-cumulocity-platform/14109 "2025-12-11T17:50:02Z")
Date: 11 December 2025 Severity: Critical Overview A critical security vulnerability has been identified in the Cumulocity Platform services that may allow unauthorized access or compromise of sensitive information if … --- ## [Security Advisory: Immediate Rotation of ‘ServiceBootstrap’ User Credentials](https://community.cumulocity.com/t/security-advisory-immediate-rotation-of-servicebootstrap-user-credentials/14110)
**Author:** [@c8y\_security](https://community.cumulocity.com/u/c8y_security)\ **Replies:** 0\ **Last updated:** [December 11, 2025, 5:48pm UTC](https://community.cumulocity.com/t/security-advisory-immediate-rotation-of-servicebootstrap-user-credentials/14110 "2025-12-11T17:48:10Z")
Date: 11th December 2025 Severity: High Audience: All Self-Hosted Cumulocity Cloud & Cumulocity Edge Customers Action Required: Immediate Password Rotation of ServiceBootstrap user. Summary We recently identified tha… --- ## [Enhanced security for encrypted tenant options](https://community.cumulocity.com/t/enhanced-security-for-encrypted-tenant-options/12233)
**Author:** [@c8y\_security](https://community.cumulocity.com/u/c8y_security)\ **Replies:** 0\ **Last updated:** [May 21, 2025, 1:42pm UTC](https://community.cumulocity.com/t/enhanced-security-for-encrypted-tenant-options/12233 "2025-05-21T13:42:42Z")
Security Alert Title: Enhanced security for encrypted tenant options Severity: High Summary: We have introduced a new security feature in the platform to address a potential vulnerability in the handling of encrypted… --- ## [CVE-2025-2298: Unauthorized deletion of data lake files](https://community.cumulocity.com/t/cve-2025-2298-unauthorized-deletion-of-data-lake-files/12167)
**Author:** [@c8y\_security](https://community.cumulocity.com/u/c8y_security)\ **Replies:** 0\ **Last updated:** [April 23, 2025, 10:09am UTC](https://community.cumulocity.com/t/cve-2025-2298-unauthorized-deletion-of-data-lake-files/12167 "2025-04-23T10:09:15Z")
Overview A recent security vulnerability in the Dremio software used as part of Cumulocity DataHub was published with CVE-2025-2298. The vulnerability allows users authenticated to Dremio to delete arbitrary files acces…