Skip to main content

What's New and Release Notes for 26.x

Security Information

This section provides security information for 26.2.20 VEN and PCE releases. For additional information about security issues, security advisories, and other security guidance about this release, log in to the Illumio Support portal.

26.2.20-PCE

FIPS 140-3

This version of the PCE can operate in FIPS mode on systems that adhere to the FIPS 140-3 standard.

26.2.20-VEN

  • cURL version 8.12.1 was upgraded to version 8.21.0 in Illumio VEN release trains 24.2 and 25.2 to address CVE-2026-10536, CVE-2026-11856, CVE-2026-8924, CVE-2026-8926, CVE-2026-8927, CVE-2026-9079, CVE-2026-12064, CVE-2026-5773, CVE-2026-6276, CVE-2026-8286, CVE-2026-8932, CVE-2026-9545, CVE-2026-9547, CVE-2025-15224, CVE-2025-14017, CVE-2026-3783.

  • sqlite version 3.51.0 was upgraded to version 3.53.2 in Illumio VEN release train 26.2 to address CVE-2025-70873, CVE-2026-11822, CVE-2026-11824.

  • zlib version 1.3.1 was upgraded to version 1.3.2 in Illumio VEN release trains 23.2, 24.2, and 25.2 to address CVE-2026-22184, CVE-2026-3381, CVE-2026-27171, and CGA-624v-j5jq-2hph.