We have now released a hotfix for the Windows and Linux versions of WithSecure Policy Manager 16.11.
This hotfix addresses a vulnerability on the Axios library used by Policy Manager Web Reporting.
WithSecure Policy Manager is not itself vulnerable, but we strongly advise our partners and customers to update to Hotfix 1 at their earliest opportunity.
The hotfix can be found at Policy Manager support pages, for both Windows and Linux.
For more information on the Axios vulnerability itself, please see https://community.withsecure.com/announcements-en/kb/articles/32898-cve-2026-40175-for-axios-javascript-library