SystemScan 109504, released May 27, 2026

New features and improvements:

[RADAR-34713] – Capability to detect vulnerabilities in Kiro CLI in authenticated scanning for Windows
[RADAR-34712] – Capability to detect vulnerabilities in Apache ECharts in authenticated scanning
[RADAR-34661] – Capability to detect vulnerabilities in ConnectWise Automate Agent in authenticated scanning for Windows
[RADAR-34648] – Capability to detect vulnerabilities in MongoDB Compass in authenticated scanning for Windows
[RADAR-34614] – Capability to detect vulnerabilities in Prisma Access Agent in authenticated scanning for Windows
[RADAR-34600] – Capability to detect vulnerabilities in SzafirHost in authenticated scanning for Windows

Version 4.38.0 released May 26th, 2026

• Resolved multiple issues in summary reports: fixed Japanese language rendering, added missing reference links (CVE identifiers), and updated product branding to WithSecure Elements Exposure Management.
• Resolved an issue where new users were not created in the system when assigned to an organization.
• Resolved an issue where navigating to a deleted or blocked unmanaged device would result in a 404 error. The device can now be viewed in an inactive state with available management options.
• Resolved an issue where removed unmanaged devices were still visible in multiple Exposure views.
• Resolved an issue where navigating from a scan definition to an unmanaged device could result in a 404 error if the device had been removed or blocked. The user is now redirected to the “Manage removed devices” view.
• Improved the error message displayed when the Scan Node Agent licence has expired.
• Overall performance improvements.

SystemScan 109299, released May 18, 2026

New features and improvements:

[RADAR-34578] – Capability to detect vulnerabilities in Spring CLoud AWS SNS in authenticated scanning

Version 4.37.9 released May 14th, 2026

• Added support for SSH authentication when configuring System Scans targeting Windows devices. Previously, SSH was only available for Linux and network targets; Windows targets were limited to WinRM. With this change, users can now configure Windows-over-SSH scans, including Windows-specific options such as Windows Server Update Services (WSUS) and Windows Update settings, alongside the standard SSH options available for Linux.
  Note: This capability is currently available via API only. UI support in the System Scan wizard is coming in a future release.
• Resolved an issue where vulnerability counts on the Computers and Unmanaged Devices lists could display incorrect values.

SystemScan 109176, released May 13, 2026

New features and improvements:

[RADAR-34542] – Capability to detect vulnerabilities inLhaz and Lhaz+ in authenticated scanning for Windows
[RADAR-34516] – Capability to detect vulnerabilities in Spring Cloud Function in authenticated scanning
[RADAR-34484] – Capability to detect vulnerabilities in WatchGuard Endpoint Agent in authenticated scanning for Windows

SystemScan 109110, released May 11, 2026

New features and improvements:

[RADAR-34447] – Capability to detect vulnerabilities in Acronis DeviceLock DLP in authenticated scanning for Windows
[RADAR-34441] – Capability to detect vulnerabilities in Dell Color Management Software in authenticated scanning for Windows
[RADAR-34406] – Capability to detect vulnerabilities in Apache MINA in authenticated scanning
[RADAR-34346] – Capability to detect vulnerabilities in ActiveMQ Broker and ActiveMQ All in authenticated scanning
[RADAR-29322] – Capability to detect vulnerabilities in Intel High Level Synthesis Compiler in authenticated scanning for Windows
[RADAR-29319] – Capability to detect vulnerabilities in Intel Advanced Link Analyzer in authenticated scanning for Windows
[RADAR-28746] – Capability to detect vulnerabilities in Grafana Alloy in authenticated scanning for Windows
[RADAR-28745] – Capability to detect vulnerabilities in Grafana Agent Flow in authenticated scanning for Windows
[RADAR-28742] – Capability to detect vulnerabilities in WatchGuard Authentication Gateway in authenticated scanning for Windows
[RADAR-28741] – Capability to detect vulnerabilities in WatchGuard SSO Client in authenticated scanning for Windows
[RADAR-20728] – Capability to detect vulnerabilities in Daemon Tools Lite/Pro/Ultra in authenticated scanning for Windows
[RADAR-20057] – Capability to detect vulnerabilities in Pritunl Client in authenticated scanning for Windows

Version 4.37.8 released May 8th, 2026

• Resolved an issue where the scanning mode (Passive or Active) was missing from the Network Scans list. The scanning mode is now displayed correctly for each target.
• Resolved an issue where removed unmanaged devices were still visible in legacy views and in the Summary Report wizard. Removed devices are now hidden consistently across all views.
• Resolved an issue where vulnerability counters were not recalculated after related scans had been deleted. Counters now reflect the current state correctly.
• Resolved an issue where Network Scan reports could not be opened in a new browser tab via right-click. Reports can now be opened in a new tab as expected.
• Resolved an issue where manually removing a subset of hosts from a Network Scan Group could trigger unintended removal of additional hosts in the same group. Only the selected hosts are now removed.
• Overall performance and stability improvements.

New release include updates related to Identity views, reports, XM Recommendations, XM Findings and Devices views

Identity

Identity Details –> Entra Group Membership

Entra group membership is now visible in the Identity details pop-up, complementing the already-available Entra roles view.

Reports

XM vulnerabilities reports are now available in pdf format

Elements Vulnerability Management Reports, accessible from Reports -> Email notification and report menu are now also downloadable in pdf format from the same context menu as before.

Note: This applies to only newly generated reports where the pdf.

Devices

Device details page features recommendations list

The device details page Environment → Devices → (Computers & Unmanaged devices) features a new tab for showing XM recommendations only for the selected device.

Note: This tab lists only open recommendations (status category = Open)

Recommendations and Findings

Direct navigation from Finding instances to the affected device view is now possible.

Affected asset of the Environment -> Exposure -> Findings view has a hyperlink which opens the details view of the affected asset in a new browser tab.

CVE-based findings being part of any Attack Paths, get an enhanced AI-generated description. 

Finding details page, explicitly shows an icon to indicate whether the description is AI-generated. e.g:

Note: Not available to all CVEs, only if CVE is part of any attack paths to help with understanding the attack path step

Device Security posture issues are now advised in XM as recommendations (requires EPP license).

In case of EPP subscription is already active for a company, security posture issues are already visible via Elements portal at Environment -> Device Security Posture menu. However if the company has XM subscription on top of EPP, all device security posture issues now presented also as XM recommendations. This will help with how to prioritize device security posture recommendations over all other recommendations. 

Device Security Posture recommendations are visible from Environment -> Exposure -> Recommendations list view also their Findings from Environment -> Exposure -> Findings  by applying filter FindingType = 'Device Security Posture'

Note: Security Posture Recommendations are only guaranteed for the newly found device posture issues which are created after the date of this release.

SystemScan 108971, released May 06, 2026

New features and improvements:

[RADAR-34408] – Capability to detect vulnerabilities in Dell/Alienware Purchased Apps in authenticated scanning for Windows
[RADAR-34390] – Capability to detect vulnerabilities in Apache Thrift in authenticated scanning
[RADAR-34382] – Capability to detect vulnerabilities in Apache Storm Metrics Prometheus in authenticated scanning
[RADAR-34381] – Capability to detect vulnerabilities in Apache Storm Client in authenticated scanning
[RADAR-34321] – Capability to detect vulnerabilities in Spring Authorization Server in authenticated scanning

SystemScan 108807, released April 29, 2026

New features and improvements:

[RADAR-34257] – Capability to detect vulnerabilities in Malwarebytes Anti-Malware in authenticated scanning for Windows
[RADAR-34159] – Capability to detect vulnerabilities in Dell PowerProtect Agent Service in authenticated scanning for Windows
[RADAR-34107] – Capability to detect vulnerabilities in TrueConf client in authenticated scanning for Windows
[RADAR-34096] – Capability to detect vulnerabilities in Devolutions Gateway in authenticated scanning for Windows
[RADAR-34079] – Capability to detect vulnerabilities in Elastic OTel Java in authenticated scanning
[RADAR-34072] – Capability to detect vulnerabilities in ESET Protect in authenticated scanning for Windows