SystemScan 106102, released December 1, 2025

New features and improvements

[RADAR-32602] – Capability to detect vulnerabilities in AWS PGSQL ODBC in authenticated scanning for Windows
[RADAR-32601] – Capability to detect vulnerabilities in AWS JDBC Wrapper in authenticated scanning
[RADAR-32599] – Capability to detect vulnerabilities in Lite XL in authenticated scanning for Windows
[RADAR-32598] – Capability to detect vulnerabilities in SigTest in authenticated scanning for Windows
[RADAR-32597] – Capability to detect vulnerabilities in SigTest Phoenix in authenticated scanning for Windows

Version 4.36.2 released November 26th, 2025

• Added pop-up notifications to inform users about the upcoming removal of the following pages by the end of 2025:
  • Home → Vulnerabilities,
  • Reports → Vulnerability reports,
  • Exposure → Vulnerabilities,
  • Exposure → Vulnerability coverage.

SystemScan 106016, released November 26, 2025

New features and improvements

[RADAR-32131] – Capability to detect vulnerabilities in baramundi Management Agent in authenticated scanning for Windows

[RADAR-32164] – Capability to detect vulnerabilities in MailStore Outlook Add-in in authenticated scanning for Windows

[RADAR-32200] – Capability to detect vulnerabilities in QNAP NetBak Replicator in authenticated scanning for Windows

[RADAR-32202] – Capability to detect vulnerabilities in NVIDIA Nsight Graphics in authenticated scanning for Windows

[RADAR-32246] – Capability to detect vulnerabilities in Apache Flink CDC in authenticated scanning

SystemScan 105984, released November 25, 2025

New features and improvements:

[RADAR-32408] – Capability to detect vulnerabilities in Nixdorf Wincor PORT IO Driver in authenticated scanning for Windows
[RADAR-32387] – Capability to detect vulnerabilities in Stashcat in authenticated scanning for Windows
[RADAR-32386] – Capability to detect vulnerabilities in AutoHotkey in authenticated scanning for Windows
[RADAR-32373] – Capability to detect vulnerabilities in Bambu Studio in authenticated scanning for Windows
[RADAR-32372] – Capability to detect vulnerabilities in Netbird VPN in authenticated scanning for Windows
[RADAR-32353] – Capability to detect vulnerabilities in Serviceware Processes in authenticated scanning for Windows
[RADAR-32330] – Capability to detect vulnerabilities in Eaton Intelligent Power Protector in authenticated scanning for Windows

SystemScan 105944, released November 24, 2025

New features and improvements:

[RADAR-32545] – Capability to detect vulnerabilities in Dell Display and Peripheral Manager in authenticated scanning for Windows
[RADAR-32535] – Capability to detect vulnerabilities in NVIDIA App detection in authenticated scanning for Windows
[RADAR-32533] – Capability to detect vulnerabilities in Sony Optical Disc Archive Software in authenticated scanning for Windows
[RADAR-32488] – Capability to detect vulnerabilities in Raspberry Pi Imager in authenticated scanning for Windows
[RADAR-32460] – Capability to detect vulnerabilities in HP Client Management Script Library in authenticated scanning for Windows

XM newsletter Week 47

Vulnerability reports now have a new home

• Vulnerability reports view are now available also under common Elements Reports -> Email Notifications and report
• Reports > Vulnerability reports will run side by side until it’s totally deprecated in favor of its new home

Identities page shows only active Identities by default

• Identities page have now new default filter to show only identities with enabled account status for both Users and Service principals. To see all the identities, filter can be removed.

Scoring clarifications: 

• To clarify how XM scoring works, info bubbles have been added to all relevant risk and impact columns in the Findings and Asset widgets, lists, as well as in recommendation and Findings details pages

Version 4.36.1 released November 18th, 2025

• Resolved an issue where the Overall Status widget continued to display outdated vulnerability data even after all assets and scans were removed. The widget now correctly shows no data when no assets or scans are present.
• Resolved an issue where email notifications about low disk space on scan nodes were not being sent.
• Added a popup announcing the removal of the Vulnerability Users page by the end of 2025.

SystemScan 105754, released November 13, 2025

New features and improvements:

[RADAR-32569] – Fix custom port usage for Fortinet Fortigate device authenticated scan via Api.

XM newsletter Week 45

We are happy to share new improvements.

Finding definitions tab added under Environment -> Exposure

• The Finding Definitions page now lists all potential finding types that Exposure Management can detect—across vulnerabilities, identities, cloud assets, and external attack surfaces. Unlike the Findings tab, this view includes definitions even if no asset is currently affected. It supports pagination, saved filters, and navigation to related data, consistent with other XM views.

Service principal tab add under Environment -> Identities

• The identities list now includes Entra service principals alongside users, providing basic information for each service principal. It supports pagination, saved filters, and navigation to related data, consistent with other XM views.

Version 4.36.0 released November 4th, 2025

• Reduced the time required to generate Summary Reports.
• Marked all users-related endpoints as deprecated in Elements Vulnerability Management API Documentation