Serial number: AV26-1154
Date: November 12, 2026
Updated: November 13, 2026

As of November 12, 2026, Check Point is affected by vulnerabilities in the following products:

• Check Point Force Firewalls
  • Multiple versions
• Check Point Management and Log Servers
  • Multiple versions
• Multi-Domain Security Management and Multi-Domain Log Server
  • Multiple versions
• Maestro Orchestrator
  • Multiple versions

Check Point indicates that CVE-2026-123039 is being exploited in the wild.

Update 1

On November 13, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-123039 to their Known Exploited Vulnerabilities (KEV) Catalog.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• CVE-2026-107484 - Input Validation Vulnerability in Gaia Portal backend handlers allows privilege escalation by an authenticated user
• CVE-2026-123039 - Local privilege escalation to root in the DynamicCLI process via local world-writable control socket
• Check Point Security
• CISA KEV: CVE-2026-123039

Serial number: AV26-1160
Date: November 13, 2026

As of November 13, 2026, n8n is affected by vulnerabilities in the following product:

• n8n
  • Prior to 2.45.5
  • Prior to 2.46.1
  • Prior to 3.0.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• OAuth Account Hijack in the End-User Credential Connect Flow via Unauthenticated Callback
• Overview · n8n-io/n8n · GitHub

Serial number: AV26-1159
Date: November 13, 2026

As of November 11, 2026, Apache is affected by vulnerabilities in the following product:

• Apache HTTP Server
  • Prior to 2.4.71

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Downloading the Apache HTTP Server
• Apache http Server Project

Serial number: AV26-1158
Date: November 13, 2026

As of November 12, 2026, Johnson Controls is affected by a vulnerability in the following product:

• EasyIO FW
  • Prior to or equal to V3.0b25

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Johnson Controls has confirmed a vulnerability impacting EasyIO FW (PDF)
• Johnson Controls Product Security Advisories

Serial number: AV26-1142
Date: November 10, 2026
Updated: November 12, 2026

As of November 10, 2026, Microsoft is affected by vulnerabilities in the following products:

• .NET 10.0
• .NET 11.0
• .NET 8.0
• .NET 9.0
• Aspire Dashboard
• Aspire Cli
• Aspire Dashboard Sdk
• Aspire Hosting
• Aspire Hosting AppHost
• Azure Confidential Clean Room
• Azure CycleCloud
• Azure DevOps
• Azure DevOps Server
• Azure DevOps Server 2025
• Azure File Sync
• Azure Front Door
• Azure Local
• Azure Machine Learning
• Azure Managed Grafana
• Azure Open AI
• Azure Privileged Identity Management (PIM)
• Azure Virtual Machines
• Azure Web Apps
• Entra Device Registration
• GitHub Copilot Plugin for JetBrains IDEs
• HEIF Image Extension
• HEVC Video Extensions
• HEVC Video Extensions for Licensed Applications
• HEVC Video Extensions from Device Manufacturer
• Microsoft 365 Apps
• Microsoft Agent Framework SDK
• Microsoft Authentication Library for JavaScript
• Microsoft Configuration Manager 2603
• Microsoft Entra Private Network Connector
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft GDK
• Microsoft HPC Pack 2016
• Microsoft HPC Pack 2019
• Microsoft JDBC Driver
• Microsoft Malware Protection Engine
• Microsoft Office 365
• Microsoft Office LTSC
• Microsoft Power Apps
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Server Subscription Edition
• Microsoft Teams for Android
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft AspNetCore Http Connections
• Microsoft AspNetCore SignalR StackExchangeRedis
• Microsoft AspNetCore WebUtilities
• Microsoft Data SqlClient
• Microsoft DotNet HotReload Watch Aspire
• Microsoft DotNet Web ProjectTemplates
• Microsoft Extensions Validation
• Microsoft TestPlatform CLI
• Microsoft VisualStudio
• Microsoft dotnet-scaffold
• Microsoft dotnet-scaffold-aspnet
• Office Online Server
• PowerShell
• Raw Image Extension
• System Formats Cbor
• System Text Json
• Visual Studio Code
• Windows 10
• Windows 11
• Windows Admin Center
• Windows App Client for Windows Desktop
• Windows Sandbox
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2012 R2 (Server Core installation)
• Windows Server 2016
• Windows Server 2016 (Server Core installation)
• Windows Server 2019
• Windows Server 2019 (Server Core installation)
• Windows Server 2022
• Windows Server 2022 (Server Core installation)
• Windows Server 2025
• Windows Server 2025 (Server Core installation)

Update 1
On November 10, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-124194 to their Known Exploited Vulnerabilities (KEV) Catalog.

Microsoft indicates that CVE-2026-124194 has been exploited.

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• November 2026 Security Updates
• CISA KEV: CVE-2026-124194

Serial number: AV26-1157
Date: November 12, 2026

As of November 11, 2026, Google is affected by vulnerabilities in the following product:

• Stable Channel Chrome for Desktop
  • Versions prior to 157.0.8103.78/.79 (Windows/Mac), and 157.0.8103.78 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Google Chrome Security Advisory

Serial number: AV26-1156
Date: November 12, 2026

As of November 11, 2026, Nodejs is affected by a vulnerability in the following product:

• node.js
  • Prior to v24.22.3
  • Prior to v26.13.1
  • Prior to v22.23.5

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Wednesday, November 11, 2026 Security Releases
• Node.js

Serial number: AV26-1155
Date: November 12, 2026

As of November 11, 2026, AMD is affected by vulnerabilities in the following products:

• AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
  • ALL except PicassoPI-FP5_1.0.1.2c
• AMD EPYC™ 4004 Series Processors
  • ALL except ComboAM5PI_1.1.0.3h
• AMD EPYC™ 4005 Series Processors
  • ALL except ComboAM5PI 1.3.0.1a
• AMD EPYC™ 7001 Series Processors
  • ALL except Naples-1.0.0.S
• AMD EPYC™ 7002 Series Processors
  • ALL except Rome-1.0.0.P
• AMD EPYC™ 7003 Series Processors
  • ALL except MilanPI-SP3_1.0.0.H
  • ALL except MilanPI-SP3_1.0.0.K
• AMD EPYC™ 8004 Series Processors
  • ALL except GenoaPI_1.0.0.J
• AMD EPYC™ 9004 Series Processors
  • ALL except GenoaPI 1.0.0.G
  • ALL except GenoaPI_1.0.0.J
• AMD EPYC™ 9005 Series Processors
  • ALL except TurinPI 1.0.0.5
  • ALL except TurinPI_1.0.0.A
• AMD EPYC™ Embedded 3000 Series Processors
  • ALL except Embedded Snowyowl Chipset Driver - 8.10.28.647 (73744e)
  • ALL except SnowyOwl_SP4_SP4r2.1.1.0.H
• AMD EPYC™ Embedded 4005 Series Processors
  • ALL except EmbeddedAM5PI 1.0.0.8
• AMD EPYC™ Embedded 7002 Series Processors
  • ALL except EmbRomePI-SP3 1.0.0.F
• AMD EPYC™ Embedded 7003 Series Processors
  • ALL except EmbMilanPI-SP3 1.0.0.E
  • ALL except EmbMilanPI-SP3 v9 1.0.0.C
• AMD EPYC™ Embedded 8004 Series Processors
  • ALL except EmbGenoaPI-SP5 1.0.0.B
  • ALL except EmbeddedGenoaPI_1.0.0.E
• AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")
  • ALL except EmbeddedGenoaPI_1.0.0.E
• AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")
  • ALL except EmbeddedGenoaPI_1.0.0.E
• AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")
  • ALL except EmbeddedGenoaPI_1.0.0.E
• AMD EPYC™ Embedded 9004 Series Processors - Bergamo
  • ALL except EmbGenoaPI-SP5 1.0.0.B
• AMD EPYC™ Embedded 9004 Series Processors - Genoa
  • ALL except EmbGenoaPI-SP5 1.0.0.B
• AMD EPYC™ Embedded 9005 Series Processors
  • ALL except EmbeddedTurinPI_SP5_1004
• AMD Instinct™ MI300A Series Processors
  • ALL except MI300A 1.0.0.B
• AMD Ryzen™ 3000 Series Desktop Processors
  • ALL except ComboAM4 1.0.0.F
  • ALL except ComboAM4v2PI_1.2.0.F
• AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
  • ALL except PicassoPI-FP5_1.0.1.2c
• AMD Ryzen™ 4000 Series Desktop Processors
  • ALL except ComboAM4v2PI_1.2.0.F
• AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
  • ALL except RenoirPI-FP6_1.0.0.Ec
• AMD Ryzen™ 5000 Series Desktop Processors
  • ALL except ComboAM4v2PI_1.2.0.F
• AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
  • ALL except ComboAM4v2PI_1.2.0.F
• AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
  • ALL except CezannePI-FP6_1.0.1.1c
• AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
  • ALL except RembrandtPI-FP7_1.0.0.Bh
• AMD Ryzen™ 7000 Series Desktop Processors
  • ALL except ComboAM5PI 1.0.0.F
  • ALL except ComboAM5PI 1.3.0.1b
  • ALL except ComboAM5PI_1.1.0.3h
  • ALL except ComboAM5PI_1.2.0.3k
• AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
  • ALL except MendocinoPI-FT6_1.0.0.7c
• AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics
  • ALL except CezannePI-FP6_1.0.1.1c
• AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
  • ALL except RembrandtPI-FP7_1.0.0.Bh
• AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
  • ALL except PhoenixPI-FP8-FP7_1.2.0.B
• AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
  • ALL except DragonRangeFL1 PI-1.0.0.3m
• AMD Ryzen™ 8000 Series Desktop Processors
  • ALL except ComboAM5 1.2.0.3d
  • ALL except ComboAM5PI 1.1.0.3d
• AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
  • ALL except PhoenixPI-FP8-FP7_1.2.0.B
• AMD Ryzen™ 9000 Series Desktop Processors
  • ALL except ComboAM5PI 1.3.0.1a
  • ALL except ComboAM5PI_1.2.0.3k
• AMD Ryzen™ 9000HX Series Mobile Processors
  • ALL except FireRangeFL1PI 1.0.0.0f
• AMD Ryzen™ AI 300 Series Processors
  • ALL except StrixKrackanPI-FP8_1.1.0.0b
• AMD Ryzen™ AI Max 300 Series Processors
  • ALL except StrixHaloPI-FP11_1.0.0.1
• AMD Ryzen™ Embedded 5000 Series Processors
  • ALL except EmbAM4PI 1008
• AMD Ryzen™ Embedded 7000 Series Processors
  • ALL except EmbeddedAM5PI 1.0.0.8
• AMD Ryzen™ Embedded 8000 Series Processors
  • ALL except EmbeddedPhoenixPI-FP7r2_1.0.0.2
• AMD Ryzen™ Embedded 9000 Series Processors
  • ALL except EmbeddedAM5PI 1.0.0.8
• AMD Ryzen™ Embedded R1000 Series Processors
  • ALL except EmbeddedPI-FP5 1211
• AMD Ryzen™ Embedded R1000 Series Processors
  • ALL except Q4 2026 AMD Ryzen Emb R2K,V2K,R1K,V1K Windows Catalyst driver (73752e)
  • ALL except Q4 2026 AMD Ryzen Emb R2K,V2K,R1K,V1K Windows Catalyst driver Release Notes(73729e)
• AMD Ryzen™ Embedded R2000 Series Processors
  • ALL except EmbeddedR2KPI-FP5 1006
• AMD Ryzen™ Embedded R2000 Series Processors
  • ALL except Q4 2026 AMD Ryzen Emb R2K,V2K,R1K,V1K Windows Catalyst driver (73752e)
  • ALL except Q4 2026 AMD Ryzen Emb R2K,V2K,R1K,V1K Windows Catalyst driver Release Notes(73729e)
• AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")
  • ALL except EmbeddedPI-FP5 1211
  • AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")
  • ALL except Q4 2026 AMD Ryzen Emb R2K,V2K,R1K,V1K Windows Catalyst driver Release Notes(73729e)
• AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")
  • ALL except Q4 2026 AMD Ryzen Emb R2K,V2K,R1K,V1K Windows Catalyst driver (73752e)
  • ALL except Q4 2026 AMD Ryzen Emb R2K,V2K,R1K,V1K Windows Catalyst driver Release Notes(73729e)
• AMD Ryzen™ Embedded V2000 Series Processors
  • ALL except EmbeddedPI-FP6_1.0.0.C
• AMD Ryzen™ Embedded V2000 Series Processors
  • ALL except Q4 2026 AMD Ryzen Emb R2K,V2K,R1K,V1K Windows Catalyst driver (73752e)
  • ALL except Q4 2026 AMD Ryzen Emb R2K,V2K,R1K,V1K Windows Catalyst driver Release Notes(73729e)
• AMD Ryzen™ Embedded V3000 Series Processors
  • ALL except Embedded-PI_FP7r2 1012
• AMD Ryzen™ Threadripper™ 3000 Processors
  • ALL except CastlePeakPI-SP3r3_1.0.0.F
• AMD Ryzen™ Threadripper™ 7000 Processors
  • ALL except StormPeakPI-SP6_1.1.0.0j
• AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
  • ALL except CastlePeakWSPI-sWRX8 1.0.0.H
  • ALL except ChagallWSPI-sWRX8 1.0.0.C
• AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
  • ALL except ChagallWSPI-sWRX8 1.0.0.C
• AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors
  • ALL except StormPeakPI-SP6_1.0.0.1l
  • ALL except StormPeakPI-SP6_1.1.0.0j

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• AMD Product Security

Serial number: AV26-1153
Date: November 12, 2026

As of November 10, 2026, Docker is affected by vulnerabilities in the following products:

• Docker Engine
  • Prior to 23.0.0
• Moby
  • Prior to 2.0.0-beta.28
• SwarmKit
  • Prior to v1.12.1-0.20220307221335-616e8db4c3b0
  • Prior to 2.1.3

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Cluster-API proxy overwrites forwarded client identity with its own
• Docker security announcements

Serial number: AV26-1152
Date: November 12, 2026

As of November 10, 2026, React is affected by a vulnerability in the following product:

• react
  • Prior to 19.0.9
  • Prior to 19.1.10
  • Prior to 19.2.9
  • Prior to 19.3.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Unauthenticated Remote Code Execution in React Server Components
• React Blog

Serial number: AV26-1151
Date: November 12, 2026

As of November 10, 2026, MongoDB is affected by vulnerabilities in the following product:

• MongoDB Server
  • Prior to 4.4.32
  • Prior to 5.0.35
  • Prior to 6.0.30
  • Prior to 7.0.48
  • Prior to 8.0.37
  • Prior to 8.3.16
  • Prior to 9.0.7

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Allow only system users to use readConcern afterOpTime
• MongoDB Alerts

Serial number: AV26-1150
Date: November 12, 2026

As of November 12, 2026, Citrix is affected by vulnerabilities in the following products:

• NetScaler ADC and NetScaler Gateway
  • Prior to 13.1-64.39
  • Prior to 14.1-73.57
• NetScaler ADC FIPS
  • Prior to 14.1-73.58 FIPS
  • Prior to 13.1-37.293 FIPS & NDcPP
• NetScaler Console
  • Prior to 14.1-74.34
• Secure Access Client for Linux
  • Prior to 26.10.4
• Secure Access Client for Windows
  • Prior to 26.11.16

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Security updates for NetScaler ADC, NetScaler Gateway, and NetScaler Console
• Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin
• Citrix NetScaler Console Security Bulletin for CVE-2026-120869
• Citrix Secure Access Client for Linux Security Bulletin for CVE-2026-118269
• Citrix Secure Access Client for Windows Security Bulletin for CVE-2026-118268
• Citrix Security Advisories

Serial number: AV26-1149
Date: November 12, 2026

As of November 9, 2026, Apple is affected by vulnerabilities in the following products:

• iOS and iPadOS
  • Prior to 18.7.12
  • Prior to 26.7.3
  • Prior to 27.2.1
• MacOS Golden Gate
  • Prior to 27.2.1
• MacOS Tahoe
  • Prior to 26.7.3
• MacOS Sequoia
  • Prior to 15.8.3
• visionOS
  • Prior to 27.2.1
• watchOS
  • Prior to 26.6.1
  • Prior to 27.2.1

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Apple security releases - Apple Support

Serial number: AV26-1148
Date: November 12, 2026

As of November 12, 2026, Progress Software is affected by vulnerabilities in the following products:

• Telerik Report Server
  • Prior to 12.3.26.1110
• Telerik Reporting
  • Prior to 20.3.26.1110
• Telerik UI for ASP.NET Core
  • Prior to 2026.3.1015
• Telerik UI for WPF
  • Prior to 2026.4.1110
• Telerik UI for WinForms
  • Prior to 2026.4.1111

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• ClassFactory Race Condition and Retained Assembly Memory in Telerik UI for ASP.NET MVC (CVE-2026-106137)
• Deserialization of Untrusted Data in Telerik Reporting Report Designers (CVE-2026-106140)
• Telerik Report Server External Control of Configuration Setting in Telerik Report Server (CVE-2026-106152)
• Improper Control of Generation of Code Vulnerability (CVE-2026-124699)
• Improper Control of Generation of Code Vulnerability (CVE-2026-124703)
• Progress Trust Center

Serial number: AV26-1086
Date: October 26, 2026
Updated: November 12, 2026

As of October 23, 2026, Craft CMS is affected by vulnerabilities in the following products:

• CMS
  • Prior to 4.18.9
  • Prior to 5.11.2
• Commerce-mollie
  • Prior to 4.4.3

Update 1
Open source reporting indicates that CVE-2026-123488 is exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• craftcms/cms 5.11.2
• craftcms/commerce-mollie 4.4.3
• Craft CMS Seccurity Advisories

Serial number: AV26-1147
Date: November 12, 2026

As of November 10, 2026, WatchGuard is affected by a vulnerability in the following product:

• Endpoint Security
  • Prior to 8.00.26.0011

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• CVE-2026-57907 — WatchGuard Endpoint Protection Local Privilege Escalation in Console-Service Communication Allows SYSTEM Code Execution
• WatchGuard Security Advisories

Serial number: AV26-1146
Date: November 12, 2026

As of November 10, 2026, Adobe is affected by vulnerabilities in the following products:

• Adobe Experience Manager (AEM) Cloud Service (CS)
  • Prior to or equal to 2026.10.29251
• Adobe Experience Manager (AEM) 6.5
  • Multiple versions
• Adobe Experience Manager (AEM) 6.5 LTS
  • Prior to or equal to Service Pack 1 - Cumulative Hotfix for GRANITE-75052
  • Prior to or equal to Service Pack 2 - Cumulative Hotfix for GRANITE-75052
  • Prior to or equal to Service Pack 3 - Cumulative Hotfix for GRANITE-75052
• Adobe Premiere
  • Prior to or equal to 27.0 and 26.5.3
• Adobe Photoshop 2027
  • Prior to or equal to 28.0
  • Prior to or equal to 27.11.1
• Adobe Media Encoder
  • Prior to or equal to 26.5.2
  • Prior to or equal to 25.6.6
• Adobe Dimension
  • Prior to or equal to 4.1.10
• Adobe Audition
  • Prior to or equal to 27.0
  • Prior to or equal to 26.5.3
• Content Credentials Rust SDK
  • Prior to or equal to c2pa-v0.91.11
• C2PA Tool
  • Prior to or equal to c2patool-v0.28.6
• Adobe After Effects
  • Prior to or equal to 27.0
  • Prior to or equal to 26.5.3
• Adobe Connect
  • Multiple versions

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Adobe Security Bulletins and Advisories

Serial number: AV26-1145
Date: November 12, 2026

As of November 11, 2026, Fortinet is affected by vulnerabilities in the following products:

• FortiAnalyzer
  • Prior to 8.0.3
  • Prior to 7.6.8
  • Prior to 7.4.8
  • Prior to 7.2.12
• FortiAnalyzer Cloud
  • Prior to 8.0.2
  • Prior to 7.6.8
  • Prior to 7.4.12
  • Prior to 7.2.13
• FortiAuthenticator
  • Prior to 8.0.4
  • Prior to 6.6.11
• FortiClientEMS
  • Prior to 7.4.8
• FortiClientMac
  • Prior to 7.4.8
• FortiClientWindows
  • Prior to 7.4.8
  • Prior to 7.2.15
• FortiClientWindowsPAM
  • Prior to 7.4.8
  • Prior to 7.2.15
• FortiMail
  • Prior to 8.0.3
  • Prior to 7.6.7
  • Prior to 7.4.9
  • Prior to 7.2.13
  • Prior to 7.0.7
• FortiManager
  • Prior to 8.0.2
  • Prior to 7.6.8
  • Prior to 7.4.12
  • Prior to 7.2.13
• FortiManager Cloud
  • Prior to 8.0.2
  • Prior to 7.6.8
  • Prior to 7.4.12
  • Prior to 7.2.13
• FortiOS
  • Prior to 8.0.2
  • Prior to 7.6.8
  • Prior to 7.4.13
  • Prior to 7.2.14
  • Prior to 7.0.19
• FortiPAM Chrome Extension
  • Prior to 8.0.1.123
• FortiSandbox
  • Prior to 5.0.6
  • Prior to 4.4.9
• FortiSASE
  • Prior to 26.3.2
• FortiSIEM
  • Prior to 7.5.1

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• PSIRT Advisories

Serial number: AV26-1144
Date: November 12, 2026

As of November 10, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following product:

• HPE Networking Private 5G Core (P5G Core)
  • Prior to or equal to 1.26.1.4

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• HPESBNW05179 rev.1 - Multiple Vulnerabilities in HPE Networking Private 5G Core
• HPE Security Bulletin Library

Serial number: AV26-1143
Date: November 12, 2026

As of November 10, 2026, N-able is affected by vulnerabilities in the following product:

• N-central
  • Prior to 2026.4.1.26

Open-source reporting indicates that CVE-2026-125883 is exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• N-central 2026.4 HF2 Release Notes
• Release Notes | N-able Status | N-able Status Page

Serial number: AV26-1140
Date: November 10, 2026

As of November 9, 2026, Google is affected by vulnerabilities in the following product:

• Stable Channel Chrome for Desktop
  • Versions prior to 157.0.8103.50/.51 (Windows/Mac), and 157.0.8103.50 (Linux)

Google indicates that CVE-2026-125350 is exploited in the wild.

Update 1
On November 10, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-125350 to their Known Exploited Vulnerabilities (KEV) Catalog.

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Google Chrome Security Advisory
• CISA KEV: CVE-2026-125350

Serial Number: AV26-834
Date: August 20, 2026
Updated: November 10, 2026

As of August 19, 2026, Cisco is affected by vulnerabilities in the following products:

• BroadWorks Application Delivery Platform
  • Prior to RI.2026.07
• BroadWorks Application Server
  • Prior to RI.2026.07
• BroadWorks Profile Server
  • Prior to RI.2026.07
• BroadWorks Xtended Services Platform
  • Prior to RI.2026.07
• Cisco Crosswork Planning
  • Prior to 7.2.1-SP
• Cisco Crosswork Data Gateway
  • Prior to 7.2.1-SP
• Cisco Crosswork Network Controller
  • Prior to 7.2.1-SP
• Cisco Secure Workload
  • Version 3.10 prior to 3.10.9.1
  • Version 4.0 prior to 4.0.4.16

Update 1
On November 10, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20320 to their Known Exploited Vulnerabilities (KEV) Catalog.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Cisco Secure Workload Software Security Hardening Release: August 2026
• Cisco Crosswork Security Hardening Release: August 2026
• Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
• Cisco Security Advisories
• CISA KEV: CVE-2026-20320

Serial Number: AV26-1112
Date: November 2, 2026
Updated: November 10, 2026

As of November 2, 2026, Barracuda Networks is affected by a vulnerability in the following products:

• Barracuda Email Security Gateway (ESG)
  • Prior to 9.4.0.030
• Barracuda Load Balancer Application Delivery Controller (ADC)
  • Prior to 6.4.0
• Barracuda Web Application Firewall (WAF)
  • Prior to 11.0.1
• Barracuda Web Security Gateway (WSG)
  • Prior to 16.1.100.100
• Barracuda Message Archiver (BMA)
  • Prior to 5.5.4.0
• Barracuda WAF Control Center (WCC)
  • Prior to 2.2.1

Update 1

Open source reporting indicates that CVE-2026-116606 is exploited in the wild.

Update 2

On November 10, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-111560 and CVE-2026-116606 to their Known Exploited Vulnerabilities (KEV) Catalog.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Pre-Authentication Authorization Bypass and Command Injection Vulnerabilities in Certain Barracuda Products — Updates Available
• Barracuda Product Security Advisories
• CISA KEV: CVE-2026-111560
• CISA KEV: CVE-2026-116606

Serial number: AV26-1141
Date: November 10, 2026

As of November 10, 2026, Ivanti is affected by vulnerabilities in the following products:

• Endpoint Manager
  • Prior or equal to version 2024 SU7
• Cloud Services Application (CSA)
  • Version 5.0.8

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Security Advisory Ivanti CSA (CVE-2026-121683)
• Security Advisory Ivanti Endpoint Manager (EPM) November 2026
• Ivanti Security Advisories

Serial number: AV26-1135
Date: November 9, 2026
Updated: November 10, 2026

As of November 4, 2026, IBM is affected by vulnerabilities in the following products:

• IBM MQ
  • Prior to or equal to 10.0.0.5 LTS and CD
  • Prior to or equal to 9.2.0.44 LTS
  • Prior to or equal to 9.3.0.42 LTS
  • Prior to or equal to 9.4.0.26 LTS
  • Prior to or equal to 9.4.5.1 CD
• IBM Watson Speech Services Cartridge
  • Prior to or equal to 5.4.0
• IBM Aspera Faspex
  • Prior to or equal to 5.0.19

Update 1

On November 9, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-123218 to their Known Exploited Vulnerabilities (KEV) Catalog.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-11724)
• Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker. (CVE-2026-17493)
• Security Bulletin: IBM Aspera Faspex has addressed a vulnerability that could allow authorization bypass
• IBM Product Security Incident Response
• CISA KEV: CVE-2026-123218

Serial number: AV26-1139
Date: November 10, 2026

As of November 10, 2026, Siemens is affected by vulnerabilities in the following products:

• Mendix Studio Pro 11
  • Prior to V11.16.0
• Mendix Studio Pro 11.12
  • Prior to V11.12.7
• ROS#
  • Prior to V2.3.1
• SIMATIC BATCH V9.1
  • All versions
• SIMATIC Information Server 2020 / 2022
  • All versions
• SIMATIC PCS 7 V9.1
  • All versions
• SIMATIC Process Historian 2020 / 2022
  • All versions
• SIMATIC WinCC Runtime Professional V17 / V18 / V19 / V20 / V21
  • All versions
• SIMATIC WinCC V7.5 / V8.0 / V8.1
  • All versions
• meta-iot2050
  • V01.03.01
• RUGGEDCOM APE1808
  • All versions
• Simcenter Femap
  • Prior to V2606.0002

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• CERT Services | Siemens

Serial number: AV26-1138
Date: November 10, 2026

As of November 10, 2026, Hitachi is affected by vulnerabilities in the following products:

• HA Monitor
  • Multiple versions
• HiRDB Server Version 10
  • Multiple versions
• HiRDB Server Version 9
  • Multiple versions
• HiRDB Server Version 9(32)
  • Multiple versions
• HiRDB Server with Additional Function Version 9
  • Multiple versions
• HiRDB Server with Additional Function Version 9(32)
  • Multiple versions
• Hitachi Dynamic Link Manager EX for AIX
  • Prior to 9.0.4-00
• Hitachi Dynamic Link Manager for AIX
  • Prior to 9.0.4-00
• Hitachi Dynamic Link Manager for Linux
  • Multiple versions
• Hitachi Dynamic Link Manager for VMware
  • Prior to 9.0.4-00
• Hitachi Dynamic Link Manager for Windows
  • Prior to 9.0.4-01
• Hitachi uCosminexus
  • Multiple versions and models
• Cosminexus HTTP Server
  • Multiple versions
• Hitachi Web Server
  • Multiple versions
• Hitachi Application Server
  • Multiple versions
• Hitachi Web Server - Custom Edition
  • All versions

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Hitachi Vulnerability Information

Serial number: AV26-1137
Date: November 10, 2026

As of November 10, 2026, SAP_SE is affected by vulnerabilities in the following products:

• SAP NetWeaver AS ABAP (Internet Communication Manager)
  • Versions KRNL64UC 7.53, KERNEL 7.53, 7.54, 7.77, 7.93, 9.16, 9.18, 9.20
• SAP Web Dispatcher
  • Versions HDB 2.00, KRNL64UC 7.53, WEBDISP 7.53, 7.54, 7.77, 7.93, 9.16, XS_ADVANCED_RUNTIME 1.00, SAP_EXTENDED_APP_SERVICES 1, KERNEL 7.53, 7.54, 7.77, 7.93, 9.16, 9.18, 9.20
• SAP Gateway
  • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, 8.04, KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 8.04, 9.16, 9.20, 9.21
• SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider)
  • Multiple versions
• SAP NetWeaver Knowledge Management (XML Forms)
  • Version KMC-CM 7.50
• SAP NetWeaver and ABAP Platform
  • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 9.16
• S4CRM
  • Versions S4CRM 204, 205, 206, S4CEXT 107, 108, 109, BBPCRM 713, 714
• SAP Web Dispatcher and Internet Communication Manager
  • Versions WEBDISP 7.93, 9.16, XS_ADVANCED_RUNTIME 1.00, KERNEL 7.93, 9.16, 9.20, 9.21
• SAP BusinessObjects Business Intelligence Platform (Web Intelligence)
  • Versions ENTERPRISE 430, 2025, 2027
• SAP NetWeaver and ABAP Platform
  • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, 8.04, KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 8.04, 9.16, 9.18, 9.20
• SAP NetWeaver (Internet Graphics Service)
  • Versions BC-FES-IGS 7.20EXT, 7.20_EX2, 7.53, 7.54, 7.81, 9.16
• SAP Web Dispatcher
  • Versions KRNL64UC 7.53, WEBDISP 7.53, 7.54, 7.77, 7.93, 9.16, KERNEL 7.53, 7.54, 7.77, 7.93, 9.16, 9.20, 9.21
• SAP Cloud SDK for Python
  • Versions 0.63.1, 0.50.0
• SAP Cloud SDK for AI(JavaScript)
  • Version v2.17.0
• SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher
  • Versions WEBDISP 9.16, KERNEL 9.16, 9.20, 9.21
• SAP NetWeaver Application Server (SAP Message Server)
  • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 9.16, 9.18, 9.20, 9.21
• SAP NetWeaver (Internet Graphics Service)
  • Versions BC-FES-IGS 7.20EXT, 7.20_EXT2, 7.53, 7.54, 7.81, 9.16
• SAP NetWeaver and ABAP Platform
  • Multiple versions
• SAP NetWeaver (SAP Message Server)
  • Versions KRNL64UC 7.53, KERNEL 7.53, 7.54, 7.77, 7.93, 9.16, 9.20, 9.21
• SAP NetWeaver AS Java EDM Application
  • Version CE-RA-EDM 7.50
• SAP NetWeaver and ABAP Platform (SAP Message Server)
  • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, 8.04, KERNEL 7.22, 7.53, 7.54, 7.77, 7.93, 8.04, 9.16, 9.18, 9.20, 9.21
• SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web Dispatcher
  • Versions WEBDISP 7.77, 7.93, 9.16, XS_ADVANCED_RUNTIME 1.0, KERNEL 7.77, 7.93, 9.16
• SAP Host Agent
  • Version SAPHOSTAGENT 7.22
• SAP ABAP Developer Tools (AMDP Data Preview)
  • Multiple versions
• SAP/astonish
  • Version v3.6.0

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• SAP Security Patch Day – November 2026

Serial number: AV26-1130
Date: November 5, 2026
Updated: November 9, 2026

As of November 5, 2026, OpenBSD is affected by a vulnerability in the following product:

• OpenSSH
  • Prior to 10.6p2

Update 1

On November 9, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-123158 to their Known Exploited Vulnerabilities (KEV) Catalog

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• OpenSSH Release Notes
• OpenSSH
• CISA KEV: CVE-2026-123158

Serial number: AV26-1136
Date: November 9, 2026

As of November 4, 2026, Red Hat is affected by vulnerabilities in the following products:

• Exploit Intelligence
  • All version
• OpenShift Serverless
  • All version
• Red Hat AMQ Broker 7
  • All version
• Red Hat Ansible Automation Platform 2
  • All version
• Red Hat Ansible Automation Platform Ansible Core 2
  • All version
• Red Hat Build of Keycloak
  • All version
• Red Hat Enterprise Linux 10 / 6 / 7 / 8 and 9
  • All version
• Red Hat Fuse 7
  • All version
• Red Hat Hardened Images
  • All version
• Red Hat JBoss Enterprise Application Platform 7 and 8
  • All version
• Red Hat JBoss Enterprise Application Platform Expansion Pack
  • All version
• Red Hat OpenShift AI (RHOAI)
  • All version
• Red Hat OpenShift Container Platform 4 and 5
  • All version
• Red Hat OpenShift Container Platform 5
  • All version
• Red Hat OpenShift Dev Spaces
  • All version
• Red Hat Satellite 6
  • All version
• Red Hat Single Sign-On 7
  • All version
• Red Hat build of Apache Camel 4 for Quarkus 3
  • All version
• Red Hat build of Apicurio Registry 3
  • All version
• Red Hat build of Debezium 3
  • All version
• Red Hat build of Keycloak 26.4
  • Prior to 26.4-29
  • Prior to 26.4-30
  • Prior to 26.4.17-2
• Red Hat build of Keycloak 26.4.17
  • All version
• Red Hat build of Keycloak 26.6
  • Prior to 26.6-24
  • Prior to 26.6.8-2
• Red Hat build of Keycloak 26.6.8
  • All version
• Red Hat build of Quarkus
  • All version
• Self-service automation portal 2
  • All version
• ansible-core
  • Prior to 2.23.0
• gst-plugins-good
  • Prior to 1.28.2

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Red Hat Security Advisories

Serial number: AV26-1134
Date: November 9, 2026

As of November 2, 2026, Dell is affected by vulnerabilities in the following products:

• Alienware Command Center (AWCC)
  • Prior to 6.14.54.0
• Wyse Management Suite
  • Prior to 2609.0.0.155

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• DSA-2026-405: Security Update for Dell Wyse Management Suite (WMS) for Multiple Vulnerabilities
• DSA-2026-429: Security Update for Dell Alienware Command Center 6.x for Multiple Vulnerabilities
• Security Advisories, Notices and Resources

Serial number: AV26-1133

Date: November 6, 2026

As of November 6, 2026, SonicWall is affected by a vulnerability in the following product:

• SonicOS
  • prior to 7.3.4-7013
  • prior to 8.2.2-8015

SonicWall indicates that CVE-2026-19868 is being exploited.

On November 6, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-19868 to their Known Exploited Vulnerabilities (KEV) Catalog.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• SonicWall SonicOS Affected By Multiple Vulnerabilities
• SonicWall Security Advisory
• CISA KEV: CVE-2026-19868

Serial Number: AV26-1132
Date: November 6, 2026

As of November 6, 2026, JetBrains is affected by vulnerabilities in the following products:

• CLion
  • Prior to 2026.3
    Prior to 2026.2.4.1
• Datalore
  • Prior to 2026.4
  • Prior to 2026.2.4
• Hub
  • Prior to 2026.2.52519
  • Prior to 2026.2.52556
• IntelliJ IDEA
  • Multiple versions
• Ktor
  • Prior to 3.6.1
• YouTrack
  • Multiple versions

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Fixed security issues
• Security - The JetBrains Blog

Serial number: AV26-1131
Date: November 6, 2026

As of November 3, 2026, Mozilla is affected by a vulnerability in the following product:

• Firefox
  • Prior to 159.0.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Security Vulnerabilities fixed in Firefox 159.0.1
• Mozilla Foundation Security Advisories — Mozilla

Serial number: AV26-1129
Date: November 5, 2026

As of November 4, 2026, Rubyonrails is affected by a vulnerability in the following product:

• Active Storage
  • Prior to 8.0.5.2
  • Prior to 8.1.4.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Release 8.0.5.2 · rails/rails
• Release 8.1.4.1 · rails/rails
• Possible arbitrary file write and read in Active Storage image analysis

Serial number: AV26-1128
Date: Novembre 4, 2026

As of November 2, 2026, Android published a security bulletin to address vulnerabilities affecting Android devices.

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Android Security Bulletin—November 2026

Serial number: AV26-1127
Date: November 4, 2026

As of November 4, 2026, Cisco is affected by vulnerabilities in the following product:

• Cisco Unified Computing System (USC) Central Software
  • Prior to 2.1(2c)

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Cisco UCS Central Software Remote Code Execution Vulnerability
• Cisco Security Advisories

Serial number: AV26-1126
Date: November 4, 2026

As of November 3, 2026, GitHub is affected by vulnerabilities in the following product:

• Enterprise Server
  • 3.19.0 Prior to 3.19.14
  • 3.20.0 Prior to 3.20.10
  • 3.21.0 Prior to 3.21.8
  • 3.22.0 Prior to 3.22.3

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Release notes - GitHub Enterprise Server 3.19 Docs
• Release notes - GitHub Enterprise Server 3.20 Docs
• Release notes - GitHub Enterprise Server 3.21 Docs
• Release notes - GitHub Enterprise Server 3.22 Docs
• GitHub Enterprise Server releases

Serial number: AV26-1125
Date: November 4, 2026

As of November 4, 2026, WatchGuard is affected by vulnerabilities in the following product:

• AuthPoint Authentication Gateway
  • Prior to 7.6.0

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• CVE-2026-121637 — WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results
• CVE-2026-121638 — WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks
• CVE-2026-121639 — WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service
• CVE-2026-121640 — WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions
• WatchGuard Security Advisories

Serial number: AV26-1124
Date: November 4, 2026

As of November 3, 2026, SolarWinds is affected by vulnerabilities in the following product:

• Dameware
  • Prior to or equal to 2026.3

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Dameware 2026.3.1 release notes
• SolarWinds Security Vulnerabilities

Serial number: AV26-1123
Date: November 4, 2026

As of November 3, 2026, Docker is affected by vulnerabilities in the following products:

• Docker Buildx
  • Prior to 0.37.2
• Docker Desktop
  • Prior to 4.98.0

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Docker Desktop release notes
• Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx
• Docker security announcements

Serial number: AV26-1122
Date: November 4, 2026

As of November 3, 2026, MongoDB is affected by vulnerabilities in the following product:

• C Driver
  • Prior to 1.30.15
  • Prior to 2.5.8

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Failure to parse OP_COMPRESSED reply can leak
• mongoc_gridfs_bucket_download_to_stream may abort on bad metadata
• MongoDB Alerts

Serial number: AV26-1121
Date: November 4, 2026

As of November 4, 2026, Phoenix Contact is affected by vulnerabilities in the following product:

• PLCnext Engineer
  • Prior to 2026.6

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Phoenix Contact GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software
• Phoenix Contact Advisories

Serial number: AV26-1120
Date: November 4, 2026

As of November 3, 2026, Tanium is affected by vulnerabilities in the following product:

• Threat Response
  • Prior to 4.12.353
  • Prior to 4.17.333
  • Prior to 4.9.480

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• TAN-2026-095 - Tanium Security Advisories
• All Advisories - Tanium Security Advisories

Serial number: AV26-1114
Date: November 3, 2026
Updated: November 4, 2026

As of November 3, 2026, Zyxel is affected by vulnerabilities in the following products:

• Zyxel GS1900 series switches
  • Multiple versions and models
• Zyxel APs, FWA7, and Security Routers
  • Multiple versions and models

Update 1
Open-source reporting indicates that CVE-2026-107441 is exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Zyxel security advisory for out-of-bounds write vulnerability in GS1900 series switches
• Zyxel security advisory for buffer overflow vulnerability in certain APs, FWA7, and Security Routers
• Zyxel Advisories

Serial number: AV26-1119
Date: November 4, 2026

As of November 3, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products:

• HPE Networking Fabric Composer (AFC)
  • Prior to 7.3.5
  • Prior to 7.4.1
• HPE Networking Virtual Intranet Access (VIA)
  • Prior to 4.7.9

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• HPESBNW05173 rev.1 - Multiple Vulnerabilities in HPE Networking Virtual Intranet Access (VIA)
• HPESBNW05172 rev.1 - Multiple Vulnerabilities in HPE Networking Fabric Composer
• HPE Security Bulletin Library

Serial number: AV26-1118
Date: November 4, 2026

As of November 3, 2026, Google is affected by vulnerabilities in the following product:

• Stable Channel Chrome for Desktop
  • Versions prior to 157.0.8103.38/.39 (Windows/Mac), and 157.0.8103.38 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Google Chrome Security Advisory

Serial number: AV26-1117
Date: November 3, 2026

As of October 31, 2026, WordPress is affected by a vulnerability in the following product:

• WordPress Core
  • Prior to 7.1.4

On November 3, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-119977 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• WordPress 7.1.4
• WordPress Releases
• CISA KEV: CVE-2026-119977

Serial number: AV26-1116
Date: November 3, 2026

As of October 29, 2026, Progress Software is affected by a vulnerability in the following product:

• WS_FTP Server
  • Prior to 2024.0.6
  • Prior to 2025.0.3

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• WS_FTP Server Critical Security Alert Bulletin - September 2026
• Progress Trust Center

Serial Number: AV26-802
Date: August 11, 2026
Updated: November 3, 2026

As of August 11, 2026, Siemens is affected by vulnerabilities in the following products:

• Desigo DXR2
  • Prior to V01.21.233.16-7862
• Desigo PXC3
  • Prior to V01.21.233.16-7862
• Desigo PXC4
  • Prior to V02.21.194.36-2715
• Desigo PXC5.E003
  • Prior to V02.21.194.36-2715
• Desigo PXC5.E24
  • Prior to V02.21.194.36-2715
• Desigo PXC7
  • Prior to V02.21.194.36-2715
• LOGO! Soft Comfort
  • Prior to V9
• Parasolid V38.0
  • Prior to V38.0.235
• Parasolid V38.1
  • Prior to V38.1.230
• SIMATIC IoT2050 Advanced
  • Prior to V4.3.4.1
• Siemens License Server (SLS)
  • Prior to V5.1
  • Prior to V5.3
• Simcenter Femap
  • Prior to V2606.0001
• Simcenter Nastran
  • Prior to V2606
• Solid Edge SE2025
  • Prior to V225.0 Update 15
• Solid Edge SE2026
  • Prior to V226.0 Update 7

Update 1
Open source reporting indicates that CVE-2026-58115 is exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available

• CERT Services | Siemens