Loading
  • Public
  • Broadcast OnlyThis group is for broadcast messages. Only group managers can post content.

Software Vulnerability Manager

Skip Feed
  1. The SVM March 2026 update is live now.

     SVM cloud version 260301 is live now. This new version of the cloud edition is compatible with the latest version of the Patch Publisher v 7.31.2212

    The update includes important feature enhancements as mentioned below –

     

    Software Vulnerability Manager User Interface Enhancements

    The following enhancements have been added to the Software Vulnerability Manager user interface to expand platform support and improve endpoint deployment flexibility.

    Support for Jamf Pro Unified Endpoint Management System

    A new Jamf Pro platform has been introduced, enabling seamless configuration and management of Jamf Pro within Software Vulnerability Manager.

    With this enhancement:

    • macOS packages, such as .dmg and .pkg, can now be published successfully to Jamf Pro
    • Packages can be deployed to endpoint systems using SVM
    • This provides greater flexibility and improved support for macOS deployments

     

    Patch Publisher Enhancements

    The following improvements have been added to the Software Vulnerability Manager (SVM) Patch Publisher to enhance patch security and signing flexibility.

    Digital Signing Support for SPS and VPM Patches

    A new Digital Signing option is now available in the Settings menu, enabling secure digital signing of SPS and VPM patches, with added flexibility to support different signing requirements.

    You can choose from the following signing options:

    Standard Signing

    • Uses a pre‑configured certificate to digitally sign patches. This option is suitable for most common patch‑signing scenarios and requires minimal configuration.

    Custom Signing

    • Allows you to configure and use a custom signing solution, including HSM‑based custom signing, for digitally signing SPS and VPM packages. This option is ideal for advanced or automated environments where standard signing does not meet specific security or compliance requirements.

     

    For the release notes, please click here.

    Expand Post

  2. The SVM January 2026 update is live now.

    SVM cloud version 260101 is live now. This new version of the cloud edition is compatible with the latest version of the Patch Publisher v 7.30.2191.

     The update includes important feature enhancements as mentioned below –

    Patch Publisher Enhancements -

    Streamlined Patch Publisher & AdminStudio Integration

    This release enables tighter automation between Patch Publisher and AdminStudio. Patches published through Patch Publisher can now be auto‑assigned to a default AdminStudio workflow (Import + Customization) and automatically marked as Subscribed. Additionally, custom packages placed in a designated shared directory can be imported on a schedule. With AdminStudio REST API access configured, Patch Publisher—through automation or the publishing wizard—can seamlessly push custom packages into AdminStudio for repackaging and distribution with minimal manual effort.

     

    Software Vulnerability Manager Enhancements

    Expanded Intune Deployment Support for SVM Cloud

    SVM Cloud now supports Intune publishing/deployments for both MSI and EXE-based Vendor Patch Module (VPM) packages. Previously restricted to MSI patches, this enhancement significantly broadens application coverage and offers greater flexibility in modern endpoint patch management.

    Network Appliance Groups Now Available in the New SVM UI

    Feature parity with the legacy UI is improved as the new SVM UI now supports the creation of Target Groups within Network Appliance Groups. These groups can be scanned directly using a Network Appliance Agent, simplifying asset segmentation and scanning workflows within the updated interface.

    New IP-Based User Access Restrictions

    Under User Management > Create New User, two new options—Restrict On IP Range and Restrict On IP Network—allow administrators to define the specific IP ranges or networks a user can access. These controls ensure users can only view or manage assets within authorized network boundaries, enhancing overall security and compliance.

     

    Enhanced Visibility & Warnings for Digitally Signed Packages

    Improvements across both Patch Publisher and the SVM User Interface now offer clearer identification and security guidance regarding digitally signed Vendor Patch Module (VPM) packages. In Patch Publisher, you can filter items using a new Digitally Signed option in Configure View, see a dedicated Digitally Signed property in the Patch Information dialog, and receive a security warning when subscribing to unsigned packages. Similarly, in the SVM UI, a new warning popup appears during the Create Update Package workflow if the selected package is not digitally signed, alerting administrators to potential security risks before they proceed.

    For the release notes, please click here.

    Expand Post

  3. SVM On-prem v7.6.1.35 R4 is now available for download.

    SVM On-prem January 2026 Updates are live now!

     SVM On-prem 7.6.1.35 R4 is now available for download. This new version of the on-prem edition is compatible with the latest version of the Patch Publisher v7.29.2188. All the recent updates made to the SVM Cloud and Patch Publisher will now be available to our SVM on-prem customers through this update.

    Patch Publisher Enhancements -

    Support for Config Manager Unified Endpoint Management System

    This release introduces the ability to configure and publish SPS and VPM patches directly to the Config Manager Unified Endpoint Management System through Patch Publisher. Once the Config Manager connection is set up, you can publish patches using either Patch Automation or the Create Patch Wizard, allowing for a streamlined and integrated publishing experience across your endpoint management environment.

    Enhanced Patch Publisher and AdminStudio Integration

    Patch Publisher now integrates more tightly with AdminStudio to reduce manual effort across packaging workflows. SVM packages are automatically assigned to the default AdminStudio workflow (Import + Customization) and marked as Subscribed for automation. Additionally, non‑VPM packages placed in a monitored shared directory can be automatically imported into AdminStudio. After AdminStudio REST access and shared directory paths are configured, both VPM and non‑VPM packages can flow seamlessly into AdminStudio for repackaging and distribution, creating a smoother and more automated pipeline.

    Software Vulnerability Manager Enhancements -

    Disable Standard Login for Root Accounts When SSO Is Enabled

    A new security enhancement allows root users to disable standard login when Single Sign-On (SSO) is active. Enabling this option removes the password‑change functionality, blocks standard login for the root account, and retains the Forgot Password option only if password recovery was already enabled. If password recovery is unavailable or the account becomes locked, access must be restored through a support request. The system also prompts for confirmation before enabling the feature and notifies the user that a temporary password will be emailed, ensuring a secure fallback when switching between SSO and standard authentication.

    New “API Access” Permission in User Management

    A dedicated API Access permission has been added to User Management under the User Roles & Permissions section. When assigned with Read/Write rights, this permission grants API‑level capabilities while disabling standard API access for the account to ensure secure and controlled integration. Administrators can configure this permission alongside others such as Scanning, Reporting, and Patching, enabling more granular and secure role management.

     

    For the release notes, please click here.

    Expand Post

  4. The SVR December 2025 update 2 is live now.

    The update includes important feature enhancements as mentioned below –

    Multi-Factor Authentication (MFA) is enforced for all Administrator level accounts and above. This enhancement adds an extra layer of security to protect critical user accounts across the platform. During login, administrators must provide a second form of verification such as a one-time pass code or authentication app confirmation in addition to their regular credentials. Users will be prompted to choose a two-factor authentication method (Token or SMS) during setup. If incorrect or incomplete information is entered, a validation error message will guide the user to correct the input. This enhancement prevents unauthorized access even if passwords are compromised, aligns with industry’s best practices, and ensures compliance with organizational security standards.

    For the release notes, please click here.

    Expand Post

  5. SVM cloud version 251202 is live now. This new version of the cloud edition is compatible with Patch Publisher v 7.29.2153.

    The update includes important feature enhancements as mentioned below –

    Support for Config Manager in Unified Endpoint Management

    The update introduces the capability to configure and publish SPS and VPM patches directly to the Config Manager Endpoint Management System. Once the connection to Config Manager is established, patches can be published using either Patch Automation or the Create Patch Wizard, ensuring seamless integration with the specified endpoint management system.

    Disable Standard Login for Root Accounts with SSO Enabled

    A new option, “Disable Standard Login for yourself,” has been added under Configuration > Settings > SSO Settings. When enabled, standard login for the root account is blocked, and the password change option is removed from the interface. If password recovery was previously enabled, the Forgot Password option remains available; otherwise, users must raise a support ticket if the account becomes locked. This feature applies only when opted in by root users and does not affect other customers unless enabled. The system prompts for confirmation and sends a temporary password to the configured email, ensuring secure access when switching from SSO to standard login.

    New API Access Permission in User Management

    A new API Access permission is now available under User Management > Create New User within the User Roles & Permissions section. This option appears when assigning Read/Write permissions and grants API-level capabilities while disabling standard API access for the account to maintain security. Administrators can configure this alongside other roles such as Scanning, Reporting, and Patching, providing granular control over user permissions.

     

    For the release notes, please click here.

    Expand Post

  6. The SVR December 2025 update is live now.

    The update includes important feature enhancements as mentioned below –

    User Interface (UI) Stack Upgrade

    This release introduces substantial improvements to the SVR technology stack by upgrading core UI frameworks and components. These enhancements deliver a more secure, stable, and optimized experience, ensuring better performance and reliability.

    For the release notes, please click here.

    Expand Post

  7. SVM cloud version 251201 is live now. This new version of the cloud edition is compatible with Patch Publisher v 7.28.2019.

    We are excited to announce a major milestone in our patch management capabilities!

    Intune publish and deployments is now integrated with SVM Cloud, enabling patches to be published/deployed directly to Intune without relying on Patch Publisher. This is a significant achievement as it marks our first feature where patch distribution and deployment happen seamlessly via the cloud.

    Key Highlights

    • Direct Intune Integration: Patch publishing functionality is now part of SVM Cloud, allowing you to configure Intune connection details under Patching > Distribution System Connections.
    • MSI Package Support in Vendor Patch Module (VPM):
      • A new Package Creation Wizard simplifies creating update packages for MSI patches.
      • Guided steps and customization options allow publishing/deploying patches to multiple endpoint management systems simultaneously.
    • Upcoming Enhancement: Support for EXE packages will be added in the next release.

     

    This integration streamlines workflows, reduces dependency on Patch Publisher, and accelerates patch deployment across your environment.

    For the release notes, please click here.

    Expand Post

  8. The SVR November 2025 update is live now.

    Password Change Notification Enhancement

    Introduces an email alert whenever a password is changed manually. This ensures users are immediately informed of any password updates, improving account visibility and enabling quick detection of unauthorized activity.

    Multi-Factor Authentication Enhancement

    Adds an extra layer of security by requiring a second verification step (e.g., one-time passcode or authentication app) during login. MFA is enforced by default for all users unless explicitly disabled, reducing the risk of unauthorized access even if passwords are compromised.

    Access Control in Workflow Management

    Implements permission checks in the Workflow Management API to ensure only authorized users can create or modify workflow rules. This prevents unauthorized changes and strengthens overall security between the UI and API.

    For the release notes, please click here.

    Expand Post

End of Feed
8 Chatter Feed Items

Group Details

Details

Description
Information
Member Count
122 Members
Loading
Group: Software Vulnerability Manager