Vendor advisory review — 2026-09

[github-actions]

Monthly check that the compatibility list still matches what the
vendors are publishing. Nothing here is automated on purpose:
deciding whether an advisory changed in a way that matters is the
part that needs reading.

data/devices.json was last marked updated 2026-08-27 — 5 days ago.

Currently tracking 23 entries across
22 vendors.

Re-check each advisory

• Brother -> re-read, unchanged — currently check-advisory — advisory (unverified (403) from CI — check by hand)
• Canon -> re-read, unchanged — currently unsupported — advisory
• Cerberus -> changed to partial, OAuth2 confirmed 2025.3.0+ (PR docs: monthly vendor advisory review, 2026-09 #431) — currently check-advisory — advisory (unverified (403) from CI — check by hand)
• Cisco -> re-read, unchanged — currently check-advisory — advisory
• Faxination -> changed to partial, "Faxination 2024 supports Modern Authentication" (PR docs: monthly vendor advisory review, 2026-09 #431) — currently check-advisory — advisory
• HP -> re-read, unchanged, still partial — currently partial — advisory (unverified (no response) from CI — check by hand)
• Konica Minolta / DEVELOP -> model list corrected + 165en/185en suffix documented (PR docs: monthly vendor advisory review, 2026-09 #431) — currently none-planned — advisory
• Kyocera -> re-read, unchanged — currently check-advisory — advisory
• Laserfiche -> changed to partial, vendor now answers directly (PR docs: monthly vendor advisory review, 2026-09 #431) — currently check-advisory — advisory
• Lexmark -> re-read, unchanged — currently check-advisory — advisory
• ManageEngine -> re-read, unchanged — currently check-advisory — advisory
• Microsoft -> re-read, unchanged — currently available, partial — advisory · advisory
• QNAP -> re-read, unchanged — currently unsupported — advisory
• Ricoh -> re-read, TLS cipher-suite deprecation added (PR docs: monthly vendor advisory review, 2026-09 #431) — currently check-advisory — advisory
• Sharp -> evidence URL had moved, replaced with the live page (PR docs: monthly vendor advisory review, 2026-09 #431) — currently partial — advisory
• Sophos -> re-read, unchanged — currently available — advisory
• Synology -> re-read, unchanged — currently check-advisory — advisory
• Toshiba -> re-read, unchanged — currently check-advisory — advisory
• TrueNAS -> re-read, unchanged — currently partial — advisory
• Veeam -> re-read, unchanged — currently partial — advisory
• Xerox -> PrimeLink moved off the Client Credentials Flow list (PR docs: monthly vendor advisory review, 2026-09 #431) — currently partial — advisory
• Zabbix -> re-read, unchanged — currently partial — advisory

What to look for

• A model moving off the "no OAuth firmware" list — that is the
  single most valuable change to catch, because
  NO-OAUTH-FIRMWARE.md
  tells people their hardware is a write-off.
• New models added to an existing advisory.
• A vendor publishing an advisory for the first time — those are
  new rows, and the reason to keep doing this.
• A dead link. An entry whose evidence URL 404s cannot be checked
  by a reader and should be replaced or removed.

When something changed

1. Edit data/devices.json and
   bump its updated field.
2. Run python tools/build-device-table.py to regenerate the
   docs table. CI fails if you skip it.

Close this issue when the pass is done, even if nothing changed —
that is a useful signal too.

[msgwing]

Wszystkich 22 producentow ponownie przeczytanych z ich zywych stron - 7 zmienione, 15 bez zmian, i to jest oczekiwany wynik comiesiecznego przegladu, nie skrocona sciezka.

Zmienione, kazdy cytat sprawdzony grepiem na swiezo pobranej stronie:

• Konica Minolta - liste modeli brakowalo pozycji, ktore advisory faktycznie wymienia (654e, 226, 7223, 206, 4020, 3320, 165/165e, 185/185e), i sufiksu, ktory decyduje: 165en/185en sa Released na V3.00, warianty bez en zostaja N/A.
• Xerox - PrimeLink zdjety z Client Credentials Flow. Tabela producenta oznacza kazdy wiersz PrimeLink jako "Not Available" w tej kolumnie.
• Ricoh - dopisane nowe ostrzezenie o wygaszeniu starych szyfrow TLS, dotykajace takze urzadzen juz zgodnych z OAuth.
• Laserfiche, Cerberus, Faxination: check-advisory -> partial - wszystkie trzy maja teraz odpowiedz producenta tam, gdzie wczesniej bylo tylko otwarte pytanie.
• Sharp - adres dowodu przekierowywal (301); podmieniony na aktualna strone, zweryfikowana zywym odczytem.

PR: #431, scalony. Cztery bramki --check przeszly, a kontrola kodow paneli (#416) sprawdzona przez celowe zepsucie przy okazji.