Progress Software

Heise's heiseshow talks through how a wave of AI-generated content is weighing on open-source projects, while German citizens are calling for government agencies to offer digital services, and Tesla's Full Self-Driving assistance system is said to be on the verge of a breakthrough. The episode ties together AI's strain on volunteer software communities with ongoing debates over digital administration in Germany.

Progress Software has released a patch for a critical command injection vulnerability, tracked as CVE-2026-91140, affecting its DataDirect ARC GenAI Agents. The flaw allowed attackers to execute arbitrary code through malicious OpenAPI input. Security teams are being urged to apply the update promptly, as the vulnerability could expose AI agent deployments to remote code execution attacks.

The PassageMath project has released the final release candidate 10.8.13.rc2 of its open-source mathematics software. PassageMath is a pip-installable, modularized fork of SageMath, offering a comprehensive mathematics system built in Python that runs portably across environments. The candidate signals the project is close to a stable 10.8.13 release, with code available on GitHub for testing ahead of the final version.

A medium-severity vulnerability, tracked as EUVD-2026-95523 with a CVSS score of 7.1, has been disclosed in Progress Software's Telerik Report Server. The flaw stems from incorrect privilege assignment in the service-agent SignalR hub and affects all versions prior to 12.2.26.1007. Users are advised to update their installations to the patched release to close the gap.

A new vulnerability, EUVD-2026-95524, has been catalogued affecting Progress Software's Telerik Report Server. Versions prior to 12.2.26.1007 contain a stored cross-site scripting flaw in the shared reporting engine, rated 8.9 out of 10 on the CVSS v3.1 scale. Administrators running affected versions are advised to update to the patched release.

Germany is reportedly supporting a faster approval process for Tesla's Full Self-Driving (FSD) system in Europe, where the feature has yet to receive regulatory clearance. The news is drawing attention from tech and automotive observers, who see German backing as a potentially significant step toward Tesla finally launching its driver-assistance software for European customers after long delays.

China's growing embrace of open-source software was not primarily a response to United States export restrictions, according to China Daily. The report argues the country's open-source momentum stems from domestic industry development and community growth rather than retaliation against Western technology limits. The claim is drawing attention amid ongoing US-China tech tensions and China's rapid progress in open-source AI models.

The MiSTer FPGA project has received an update bringing Sega System 32 arcade hardware emulation, with the fighting game Title Fight featured as part of the release. Enthusiasts of retro arcade preservation are sharing the news, as MiSTer recreates classic boards on field-programmable gate array hardware rather than through software emulation.

Progress Software has disclosed CVE-2026-92931, a server-side request forgery vulnerability in the Sitefinity Next.js SDK npm package. According to the advisory, a remote attacker could trick the server into making requests to an attacker-controlled host, potentially exposing sensitive information. Affected versions reportedly begin with 15.1.8326, and developers using the package are being urged to review their installations.

Turing's chief executive appeared on the Sourcery program to discuss super intelligence, open source models, and AI agents. The conversation touches on how rapidly advancing AI capabilities could reshape the software industry and which approaches, closed or open, are best positioned to lead. The remarks have drawn attention amid ongoing debate over the pace of AI progress.

A freelance developer described a hectic week, particularly the weekend, while balancing one of her freelance projects. Writing about week three of her learning journey, she touched on AI, web development, productivity and inclusive community practices in software engineering. The update resonated with people following her progress and the wider conversation about freelancing alongside continuous learning in tech.