On 2^nd September 2026, BDNCIRT issued an Advisory regarding TerminalFix Campaign: ClickFix- Based Multistage Intrusion Deploying Reverse Tunneling and Active Directory Reconnaissance.

Review the Advisory and take the necessary action.

As of 1^st September 2026, Mozilla is affected by vulnerabilities in the following products:

• Firefox ESR
  • Versions prior to 115.40
  • Versions prior to 140.15
  • Versions prior to 153.2
• Firefox
  • Versions prior to 155

Review the provided web links and apply any necessary updates as they become available.

• Security Vulnerabilities fixed in Firefox ESR 115.40 - Mozilla
• Security Vulnerabilities fixed in Firefox ESR 140.15 - Mozilla
• Security Vulnerabilities fixed in Firefox ESR 153.2 - Mozilla
• Security Vulnerabilities fixed in Firefox 155 - Mozilla
• Mozilla Foundation Security Advisories - Mozilla

As of 28^th August 2026, IBM is affected by vulnerabilities in the following products:

• SPSS Collaboration and Deployment Services
  • Multiple versions
• IBM SPSS Analytic Server
  • Multiple version
• IBM MQ Agent
  • Multiple versions
• IBM Maximo Application Suite - Monitor Component
  • Prior to or equal to 9.2, 9.1 and 9.0
• IBM Observability with Instana (Agent)
  • Prior to or equal to 1.0.323
• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
  • Multiple versions
• IBM Engineering Test Management
  • Prior to equal to 7.2, 7.1 and 7.0.3
• IBM Control Center
  • Prior to or equal to v6.3.1.0
• IBM Concert Software
  • Prior to or equal to 2.3.1
• IBM Tivoli System Automation Application Manager 4.1
  • Versions WebSphere Application Server 8.5 and 9.0
• SPSS Collaboration and Deployment Services
  • Multiple versions
• IBM Sovereign Core
  • Prior to or equal to 1.1
• IBM Maximo Application Suite - Cluster Performance Insights
  • Prior to or equal to 9.2
• IBM Transformation Advisor
  • Prior to or equal to 5.0.0
• IBM Application Modernization Accelerator
  • Prior to or equal to 5.0.0
• IBM webMethods Integration (on prem)
  • Prior to or equal to 10.15,11.1 and 12.1

Review the IBM Product Security Incident Response and apply the necessary updates.

As of 28^th August 2026, Dell is affected by vulnerabilities in the following products:

• Dell PowerEdge Server for Intel Processor Firmware
  • Multiple versions and models
• Dell AppSync
  • Prior to or equal to 4.6.0.4 and 4.6.1.0

Review the provided web links and apply any necessary updates as they become available.

• DSA-2026-356: Security Update for Dell PowerEdge Server for Intel® Processor Firmware Vulnerability
• DSA-2026-165: Security Update for Dell AppSync Vulnerabilities
• Security Advisories, Notices and Resources | Dell USA

As of 27^th August 2026, WatchGuard is affected by vulnerabilities in the following products:

• Dimension
  • Prior to 2.3.1
• Fireware OS
  • Prior to 12.12.2
  • Prior to 12.5.20
  • Prior to 2026.2.2

Review the WatchGuard Security Advisories and apply any necessary updates as they become available.

As of 27^th August 2026, ServiceNow is affected by vulnerabilities in the following products:

• Xanadu
  • Versions prior to Patch 11 Hot Fix 7a
• Yokohama
  • Versions prior to Yokohama Patch 12 Hot Fix 3b
  • Versions prior to Yokohama Patch 13 Hot Fix 4
• Zurich
  • Multiple versions
• Australia
  • Multiple versions

Review the provided web links and apply any necessary updates as they become available.

• August 2026 CVE Advisory Notification
• ServiceNow security advisories

As of 27^th August 2026, Redis is affected by a vulnerability in the following product:

• Redis
  • 8.0
  • All except 8.10.1
  • All except 8.2.9
  • All except 8.4.6
  • All except 8.6.6
  • All except 8.8.2

Review the provided web links and apply any necessary updates as they become available.

• Fix use-after-free in tlsProcessPendingData() pending-list iteration
• GitHub Releases

As of 27^th August 2026, Grafana is affected by a vulnerability in Alloy prior to or equal to 1.18.1.

Review the provided web link and apply any necessary updates as they become available.

• Grafana: The open and composable observability platform | Grafana Labs
• CVE-2026-19516 CVE Record

As of 27^th August 2026, cPanel is affected by vulnerabilities in the following products:

• cPanel & WebHost Manager (WHM) software
  • Prior to 11.110.0.141
  • Prior to 11.134.0.53
  • Prior to 11.136.0.37
  • Prior to 11.138.0.2
  • Prior to WP2: 11.138.1.7

Review the provided web links and apply any necessary updates as they become available

• Security: CVE-2026-65643 Vulnerability in cPanel’s Domain Parking Functionality - 27th August, 2026
• cPanel Security

As of 27^th August 2026, ServiceNow is affected by vulnerabilities in the following products:

• Xanadu
  • Versions prior to Patch 11 Hot Fix 7a
• Yokohama
  • Versions prior to Yokohama Patch 12 Hot Fix 3b
  • Versions prior to Yokohama Patch 13 Hot Fix 4
• Zurich
  • Multiple versions
• Australia
  • Multiple versions

Review the provided web links and apply any necessary updates as they become available.

• August 2026 CVE Advisory Notification
• ServiceNow security advisories

As of 27^th August 2026, Redis is affected by a vulnerability in the following product:

• Redis
  • 8.0
  • All except 8.10.1
  • All except 8.2.9
  • All except 8.4.6
  • All except 8.6.6
  • All except 8.8.2

Review the provided web links and apply any necessary updates as they become available.

• Fix use-after-free in tlsProcessPendingData() pending-list iteration
• GitHub Releases

As of 27^th August 2026, Grafana is affected by a vulnerability in Alloy prior to or equal to 1.18.1.

Review the provided web link and apply any necessary updates as they become available.

• Grafana: The open and composable observability platform | Grafana Labs
• CVE-2026-19516 CVE Record

As of 25^th August 2026, NVIDIA is affected by vulnerabilities in the following product:

• NVIDIA NemoClaw and OpenShell multiple versions
• NVIDIA Unified Fabric manager multiple versions and models
• NVIDIA DGX Spark versions prior to 1.110.13

Review the provided web links and apply any necessary updates as they become available.

• Security Bulletin: NVIDIA NemoClaw and OpenShell - August 2026
• Security Bulletin: NVIDIA Unified Fabric Manager - August 2026

As of 25^th August 2026, Next.js is affected by critical vulnerabilities in the following product:

• js
  • Version 15.5 prior to 15.5.24
  • Version 16.3 prior to 16.3.3

Review the August 2026 Security Release and apply any necessary updates as they become available.

As of 26^th August 2026, TeamViewer is affected by vulnerabilities in the following products:

• TeamViewer Full Client
  • Multiple versions and platforms
• TeamViewer Host
  • Multiple versions and platforms
• TeamViewer Portable
  • Prior to version 15.64.7
• TeamViewer QuickSupport
  • Multiple versions and platforms

Review the provided web links and apply any necessary updates as they become available.

• TV-2026-1008
• TV-2026-1009
• Security bulletins | TeamViewer

On 30^th June 2026, Citrix published a security advisory to address critical vulnerabilities in the following products:

• NetScaler ADC and NetScaler Gateway - versions 14.1 before 14.1-72.61
• NetScaler ADC and NetScaler Gateway - versions 13.1 before 13.1-63.18
• NetScaler ADC FIPS – versions before 14.1-72.61 FIPS
• NetScaler ADC FIPS and NDcPP – versions before 13.1-37.272

Open-source reporting indicates that CVE-2026-8451 is being exploited.

Open-source reporting indicates that CVE-2026-8452 is being exploited in the wild.

On 26^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-8452 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474
• Citrix Security Advisories
• CISA KEV: CVE-2026-8452

As of 25^th August 2026, SonicWall is affected by vulnerabilities in NetExtender Linux Client 3.5 and earlier versions.

Review the provided web links and apply any necessary updates as they become available.

• Security Advisory
• SonicWall Security Advisories

As of 25^th August 2026, Veeam is affected by vulnerabilities in the following products:

• Backup and Replication
  • Prior to 13.0.3 (build 13.0.3.63)
  • Prior to 13.1 (build 13.1.0.411)
• ONE
  • Prior to or equal to 13.0.2.6723
  • Prior to or equal to 13.1.0.7034

Review the provided web links and apply any necessary updates as they become available.

• KB4902: Vulnerability Resolved in Veeam Backup & Replication 13.1
• KB4905: Vulnerability Resolved in Veeam ONE 13.1 Patch 0
• Veeam Support Knowledge Base

As of 25^th August 2026, OpenSSL is affected by vulnerabilities in the following product:

• OpenSSL
  • Prior to 1.0.2zr
  • Prior to 1.1.1zi
  • Prior to 3.0.22
  • Prior to 3.4.7
  • Prior to 3.5.8
  • Prior to 3.6.4
  • Prior to 4.0.2

Review the OpenSSL Security News and apply the necessary updates.

On 19^th August 2026, WatchGuard published a security advisory to address vulnerabilities in WatchGuard Agent - prior to 1.25.13.0000.

Review the provided web links and apply any necessary updates as they become available.

• WatchGuard Endpoint Security Prime Enhancements and Resolved Issues
• Security Advisories | WatchGuard Technologies

As of 25^th August 2026, Adobe is affected by vulnerabilities in the following products:

• Adobe Campaign Classic
  • Prior to or equal to ACC v7: 7.4.4 build 9400
• Adobe Substance 3D Designer
  • Prior to or equal to 16.0.4
• Adobe Substance 3D Painter
  • Prior to or equal to 12.1.2
• Adobe Substance 3D Sampler
  • Prior to or equal to 6.0.1
• Adobe XD
  • Prior to or equal to 60
• C2PA Tool
  • Prior to or equal to c2patool-v0.26.70
• Content Credentials Rust SDK
  • Prior to or equal to c2pa-v0.89.0
• Illustrator 2025
  • Prior to or equal to 29.8.9
• Illustrator 2026
  • Prior to or equal to 30.6

Review the Adobe Security Advisories and apply the necessary updates.

As of 17^th August 2026, Dell is affected by vulnerabilities in the following products:

• Alienware Command Center (AWCC)
  • Prior to 6.14.20.0
• Dell Command Update (DCU)
  • Prior to 5.7.1
• Dell Cyber Detect OVA
  • Prior to 20.3.0
• Dell Networking OS10
  • Prior to 10.5.6.14
• Dell Device Management Agent (DDMA)
  • Prior to 26.06
• Dell ThinOS10
  • Multiple versions and models
• Metro Node
  • Prior to 4.6.0.4
• ObjectScale
  • Prior to 4.3.0.1
• OpenManage Enterprise
  • Prior to 4.7.0
• PowerPath for Windows
  • Prior to 8.0 SP2
• PowerScale OneFS
  • Prior to 14.1
• Power Protect Cyber Recovery
  • Multiple versions
• PowerStoreT OS (multiple models)
  • Prior to 5.0.0.2-2761110
• RecoverPoint for Virtual Machines
  • Prior to 6.1
• UCC Edge
  • Prior to 3.0.2
• Watchdog Timer Driver
  • Prior to 2.0.0.1

Review the provided Dell Security Advisory and apply the necessary updates.

On 20^th January 2026, Oracle published a security advisory to address vulnerabilities in multiple products.

Update 1
On 21^st January 2026, a proof of concept (PoC) for the vulnerability CVE-2026-21962 became publicly available.

CVE-2026-21962 is a vulnerability in the Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in products of Oracle Fusion Middleware that may allow a remote attacker to obtain unauthorized access.

Update 2
On 24^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-21962 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web link and apply the necessary updates.

• Oracle Critical Patch Update Advisory - January 2026
• CISA KEV: CVE-2026-21962

On 21^st August 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 151.0.7922.173.

Review the Google security bulletins and apply the required updates.

As of 19^th August 2026, Splunk is affected by vulnerabilities in the following products:

• Cisco Talos Intelligence for Enterprise Security Cloud
  • Prior to 1.0.3
• Splunk Enterprise
  • Prior to 10.0.9
  • Prior to 10.2.6
  • Prior to 10.4.1
  • Prior to 10.4.2
  • Prior to 9.4.14
• Splunk MCP Server app
  • Prior to 1.2.1
• Splunk Universal Forwarder
  • Prior to 10.4.2
  • Prior to 10.2.6
  • Prior to 10.0.9
  • Prior to 9.4.14
• Splunk SOAR
  • Prior to 8.6.0
• Splunk SOAR Connectors
  • Multiple versions and models
• Splunk Enterprise Security
  • Prior to 8.6.1
• Splunk Apps and Add-ons
  • Multiple versions and models

Review the provided Splunk Security Advisories and apply any necessary updates as they become available.

As of 18^th August 2026, Apple is affected by vulnerabilities in the following products:

• Safari
  • Prior to 26.6.1
• iOS and iPadOS
  • Prior to 18.7.10
  • Prior to 26.6.1
• MacOS Tahoe
  • Prior to 26.6.2

Review the provided Apple Security Releases and apply any necessary updates as they become available.

As of 18^th August 2026, Mozilla is affected by vulnerabilities in the following products:

• Firefox
  • versions prior to 154
• Firefox ESR
  • versions prior to 115.39
  • versions prior to 140.14
  • versions prior to 153.1
• Thunderbird
  • versions prior to 140.14
  • versions prior to 153.1
  • versions prior to 154

Review the provided Mozilla Foundation Security Advisories and apply any necessary updates as they become available.

As of 20^th August 2026, Spring is affected by vulnerabilities in the following products:

• Spring AI
  • Prior to or equal to 2.0.0
  • Prior to or equal to 1.0.9
  • Prior to or equal to 1.1.8
• Spring Security
  • Multiple versions

• Spring Cloud Config
  • Multiple versions

• Spring Data REST
  • Multiple versions

• Spring Cloud Gateway
  • Multiple versions

• Spring Cloud Commons
  • Multiple versions

• Spring for GraphQL
  • Multiple versions

• Spring Integration
  • Multiple versions

• Spring Authorization Server
  • Prior to or equal to 1.5.8
  • Prior to or equal to 1.4.11

Review the provided Security Advisories and apply any necessary updates as they become available.

As of 17^th August 2026, GitLab is affected by vulnerabilities in the following product:

• GitLab
  • Prior to 18.11.11
  • Prior to 19.0.8
  • Prior to 19.1.6
  • Prior to 19.2.4

Open-source reporting indicates that CVE-2026-19478 is being exploited in the wild.

Review the provided web links and apply any necessary updates as they become available.

• GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11 | GitLab Docs
• GitLab release notes

As of 19^th August 2026, Cisco is affected by vulnerabilities in the following products:

• BroadWorks Application Delivery Platform
  • Prior to RI.2026.07

• BroadWorks Application Server
  • Prior to RI.2026.07

• BroadWorks Profile Server
  • Prior to RI.2026.07

• BroadWorks Xtended Services Platform
  • Prior to RI.2026.07

• Cisco Crosswork Planning
  • Prior to 7.2.1-SP

• Cisco Crosswork Data Gateway
  • Prior to 7.2.1-SP

• Cisco Crosswork Network Controller
  • Prior to 7.2.1-SP

• Cisco Secure Workload
  • Version 3.10 prior to 3.10.9.1
  • Version 4.0 prior to 4.0.4.16

• Cisco Secure Workload Software Security Hardening Release: August 2026
• Cisco Crosswork Security Hardening Release: August 2026
• Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
• Cisco Security Advisories

As of 20^th August 2026, n8n is affected by vulnerabilities in the following product:

• n8n
  • Prior to 1.123.69
  • Prior to 2.33.4
  • Prior to 2.34.1

Review the provided web links and apply any necessary updates as they become available.

• RCE in the n8n Main Process via Path Traversal in MCP Node-Schema Loading
• Snowflake Node Arbitrary File Read and Write via Client-Side Commands
• n8n Security

As of 18^th August 2026, Atlassian is affected by vulnerabilities in the following products:

• Bamboo Data Center and Server
  • multiple versions

• Bitbucket Data Center and Server
  • multiple versions

• Confluence Data Center and Server
  • multiple versions

• Crowd Data Center and Server
  • multiple versions

• Fisheye/Crucible
  • all versions from 4.9.0 to 4.9.12

• Jira Data Center and Server
  • multiple versions

• Jira Service Management Data Center and Server
  • multiple versions

• Security Bulletin - 18th August 2026
• Security Advisories & Bulletins

As of 18^th August 2026, NVIDIA is affected by vulnerabilities in the following products:

• Triton Inference Server
  • Versions prior to 0.0-26.05

• Cumulus Linux GA/LTS
  • Multiple versions

• NVOS
  • Versions prior to 25.0.2.4438 and 25.0.2.6077

• product-security/2026/5865 at main · NVIDIA/product-security · GitHub
• Security Bulletin: NVIDIA Triton Inference Server - August 2026
• Security Bulletin: NVIDIA Cumulus Linux and NVOS - August 2026
• NVIDIA Product Security

As of 18^th August 2026, Oracle Corporation is affected by vulnerabilities in the following products:

• Oracle Database Server
• Oracle Autonomous Health Framework
• Oracle Essbase
• Oracle Application Testing Suite
• Oracle Commerce
• Oracle Communications
• Oracle Construction and Engineering
• Oracle E‑Business Suite
• Oracle Enterprise Manager
• Oracle Financial Services Applications
• Oracle Food and Beverage Applications
• Oracle Fusion Middleware
• Oracle Analytics
• Oracle Hospitality Applications
• Oracle Hyperion
• Oracle Java SE
• Oracle JD Edwards
• Oracle MySQL
• Oracle MySQL
• Oracle Retail Applications
• Oracle Siebel CRM
• Oracle Supply Chain
• Oracle Virtualization

As of 19^th August 2026, Citrix is affected by vulnerabilities in the following products:

• NetScaler ADC and NetScaler
  • Version 13.1 prior to or equal to 13.1-63.21
  • Version 14.1 prior to or equal to 14.1-73.32

• NetScaler ADC FIPS
  • Prior to 14.1-73.32 FIPS

• NetScaler ADC FIPS and NDcPP
  • Prior to 13.1-37.277

• NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490
• Citrix Security Advisories

As of 17^th August 2026, JetBrains is affected by vulnerabilities in the following products:

• IntelliJ IDEA
  • Prior to 2026.1.5
  • Prior to 2026.2.1
• Ktor
  • Prior to 3.4.1
• PyCharm
  • Prior to 2026.2.1
• YouTrack
  • Prior to 2025.3.156085
  • Prior to 2026.1.13901
  • Prior to 2026.1.13903
  • Prior to 2026.1.13913
  • Prior to 2026.1.13914
  • Prior to 2026.2.17917
  • Prior to 2026.2.17950
  • Prior to 2026.2.18068
  • Prior to 2026.2.18095
  • Prior to 2026.2.18112

Review the provided Fixed security issues and apply any necessary updates as they become available.

As of 17^th August 2026, BeyondTrust is affected by vulnerabilities in Endpoint Privilege Management (Windows deployment) - version 26.1.2 and prior.

Review the provided web links and apply any necessary updates as they become available.

• BT26-04 | BeyondTrust
• BeyondTrust Advisories

As of 17^th August 2026, GitLab is affected by vulnerabilities in the following product:

• GitLab
  • Prior to 18.11.11
  • Prior to 19.0.8
  • Prior to 19.1.6
  • Prior to 19.2.4

Review the provided web links and apply any necessary updates as they become available.

• GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11 | GitLab Docs
• GitLab release notes | GitLab Docs

On 18^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the U.S. Department of Health and Human Services (HHS) released an update to the joint Cybersecurity Advisory Medusa Ransomware. The advisory is part of an ongoing series detailing ransomware variants and threat actors. It provides technical details on Medusa ransomware activity, along with detection and mitigation guidance to help protect at-risk government and critical infrastructure organizations.

Medusa is a ransomware-as-a-service variant first identified in June 2021. As of April 2026, Medusa actors have impacted more than 500 victims across multiple critical infrastructure sectors, including Healthcare and Public Health, Defense Industrial Base, Critical Manufacturing, Government Services and Facilities, Information Technology, and Financial Services. Other victims include organizations in the medical, education, legal, insurance, technology, and manufacturing industries.

The updated advisory details how Medusa actors gain initial access through brokers, phishing, and exploitation of newly disclosed, unpatched internet-facing vulnerabilities. Medusa actors often use legitimate tools and living off the land techniques to evade detection. They may also leverage remote monitoring and management software and remote access services, including Remote Desktop Protocol, for lateral movement. Once inside a network, they use common utilities and tools to support credential access, data exfiltration, and ransomware deployment. Medusa uses a double-extortion model, encrypting systems and threatening to publish exfiltrated data if victims do not pay.

CISA, FBI, and HHS urge organizations to implement the advisory's mitigations, including these key actions:

• Mitigate known vulnerabilities by ensuring operating systems, software, and firmware are patched and up to date within a risk-informed timeframe.
• Segment networks to restrict lateral movement from initially infected devices to other devices in the organization.
• Filter network traffic by preventing unknown or untrusted origins from accessing remote services on internal systems.

Read the joint advisory for indicators of compromise, incident response actions, mitigations, and other recommendations to protect your organization from Medusa. 

As of 11^th August 2026, Microsoft is affected by vulnerabilities in the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• App Installer
• Application Insights Profiler
• Azure Active Directory
• Azure Confidential Ledger
• Azure CycleCloud
• Azure Kubernetes Service
• Azure Logic Apps
• Azure Monitor Agent Linux Extension
• Azure SQL Database
• Azure SQL Managed Instance
• Azure SRE Agent
• Azure Service Bus
• Azure Storage Explorer
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
• Microsoft .NET Framework 3.5 AND 4.7.2
• Microsoft .NET Framework 3.5 AND 4.8
• Microsoft .NET Framework 3.5 AND 4.8.1
• Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
• Microsoft .NET Framework 4.8
• Microsoft .NET Framework 4.8.1
• Microsoft 365 Admin Center
• Microsoft 365 Apps for Enterprise
• Microsoft Access 2016
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics 365 (on-premises)
• Microsoft Dynamics 365 Business Central 2024
• Microsoft Dynamics 365 Business Central 2026
• Microsoft Dynamics 365 Business Central Release Wave 1 2025
• Microsoft Dynamics 365 Business Central Release Wave 2 2025
• Microsoft Entra Connect
• Microsoft Entra ID
• Microsoft Entra Provisioning Service
• Microsoft Excel 2016
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2019
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365 for Mac
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Outlook 2016
• Microsoft Planetary Computer Pro (GeoCatalog)
• Microsoft Power Apps
• Microsoft PowerPoint 2016
• Microsoft Purview eDiscovery
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Online
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Teams
• Microsoft Teams for Android
• Microsoft Teams for iOS
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Visual Studio Code CoPilot Chat Extension
• Microsoft Word 2016
• OneDrive for MacOS
• Power BI Report Server
• PowerShell 7.4
• PowerShell 7.5
• PowerShell 7.6
• Python extension for Visual Studio Code
• Visual Studio Code
• Windows 10
• Windows 11
• Windows App Client for Windows Desktop
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025

Review the provided web link, implement the suggested mitigations, and apply the necessary updates.

On 18^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-33824 and CVE-2026-55040 to their Known Exploited Vulnerabilities (KEV) Database.

• August 2026 Security Updates
• CISA KEV: CVE-2026-33824
• CISA KEV: CVE-2026-55040

As of 30^th July 2026, VMware is affected by vulnerabilities in the following products:

• Cloud Foundation
  • 5.x
  • 9.0.x.x
  • 9.1.x.x
  • Prior to 5.2.3
• ESX
  • Prior to ESXi-9.0.2.0100-25595025
  • Prior to ESXi-9.1.0.0-25370933
  • Prior to ESXi-9.1.0.0200-25557999
  • Prior to ESXi80U3i-25205845
  • Prior to ESXi80U3k-25595708
• Fusion
  • Prior to 26H1
• Telco Cloud Infrastructure
  • 3.0
• Telco Cloud Platform
  • 4.x
  • 5.0.x
  • 5.1.x
• Workstation
  • Prior to 26H1
• vCenter
  • Prior to 8.0 U3k
  • Prior to 9.0.2.0100
  • Prior to 9.1.0.0300
• vSphere Foundation
  • 9.0.x.x
  • 9.1.x.x

On 18^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-59310 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply any necessary updates as they become available.

• VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)
• Security Advisories - VMware Cloud Foundation
• CISA KEV: CVE-2026-59310

As of 6^th August 2026, Apple is affected by vulnerabilities in the following products:

• macOS Tahoe
  • Prior to 26.6.1
• macOS Sequoia
  • Prior to 15.7.9
• macOS Sonoma
  • Prior to 14.8.9

Open-source reporting indicates that CVE-2026-65400 is being exploited in the wild.

On 18^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-65400 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web link and apply the necessary updates.

• About the security content of macOS Tahoe 26.6.1
• About the security content of macOS Sequoia 15.7.9
• About the security content of macOS Sonoma 14.8.9
• Apple security releases - Apple Support
• CISA KEV: CVE-2026-65400

On 17^th August 2026, BDNCIRT issued an Advisory on DoNot (APT-C-35) Cyber-Espionage Campaign Targeting Bangladesh Military and Defence Personnel.

Review the Advisory and take the necessary action.

As of 14^th August 2026, IBM is affected by vulnerabilities in the following product:

• IBM App Connect Operator
  • multiple versions
• IBM App Connect Enterprise Certified Containers Operands
  • multiple versions
• Total Storage Service Console (TSSC) / TS4500 IMC
  • multiple versions
• IBM Tivoli Network Manager IP Edition
  • Prior to or equal to 4.2.0.24 IF1
• IBM Tivoli Monitoring
  • Prior to or equal to 6.3.0.7 Service Pack 23
• PowerVC
  • Prior to or equal to 2.3.1, 2.3.2 and 2.3.3
• Total Storage Service Console (TSSC) / TS4500 IMC
  • multiple versions
• IBM Storage Scale
  • multiple versions
• IBM Netezza Appliance
  • Prior to or equal to 1.0.1.0
• Tooling Community Edition
  • Prior to or equal to 1.5.0
• IBM Documentation Offline
  • Prior to or equal to 1.4.1
• IBM Industry Solutions Workbench
  • multiple versions
• IBM Rational Developer for i (RDi)
  • Prior to or equal to 9.9
• Langflow OSS
  • Prior to or equal to 1.10.0
• Network Threat Analytics App
  • Prior to or equal to 2.0.0
• IBM AIX
  • Prior to or equal to 7.2 and 7.3
• IBM PowerVM VIOS
  • Prior to or equal to 4.1
• IBM Server Firmware
  • multiple versions

Review the IBM Product Security Incident Response and apply the necessary updates.

On 14^th August 2026, Tenable published a security advisory to address vulnerabilities in Security Center - Prior to 6.9.0.

Review the Tenable Security Advisory and apply the necessary updates:

As of 14^th August 2026, Dell is affected by vulnerabilities in the following products:

• PowerFlex appliance
  • Prior to 51.391.02 and 51.384.02
• PowerFlex Rack
  • Prior to 3.9.1.2 and 3.8.4.2
• PowerFlex Software
  • Prior to 5.1.0.2 and 4.5.6
• Dell Client Platform for Multiple AMD BIOS
  • multiple versions and models
• Dell Client Platform BIOS for 2026.3 IPU
  • multiple versions and models
• Dell VPlex
  • Prior to 6.2.2.1

Review the provided Dell Security Advisory and apply the necessary updates.

On 14^th August 2026, Microsoft published a security update to address vulnerabilities in Edge (Chromium-based) - versions prior to 151.0.4129.86.

Review the provided web links and apply any necessary updates as they become available.

• Microsoft Edge Stable Channel Release Notes
• Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2026-72970 (en anglais seulement)

As of 6^th August 2026, Apple is affected by vulnerabilities in the following products:

• macOS Tahoe
  • Prior to 26.6.1
• macOS Sequoia
  • Prior to 15.7.9
• macOS Sonoma
  • Prior to 14.8.9

Open-source reporting indicates that CVE-2026-65400 is being exploited in the wild.

Review the provided web link and apply the necessary updates.

• About the security content of macOS Tahoe 26.6.1
• About the security content of macOS Sequoia 15.7.9
• About the security content of macOS Sonoma 14.8.9
• Apple security releases - Apple Support

On 30^th June 2026, Citrix published a security advisory to address critical vulnerabilities in the following products:

• NetScaler ADC and NetScaler Gateway - versions 14.1 before 14.1-72.61
• NetScaler ADC and NetScaler Gateway - versions 13.1 before 13.1-63.18
• NetScaler ADC FIPS - versions before 14.1-72.61 FIPS
• NetScaler ADC FIPS and NDcPP - versions before 13.1-37.272

Open-source reporting indicates that CVE-2026-8451 is being exploited.

Open-source reporting indicates that CVE-2026-8452 is being exploited in the wild.

Review the provided web links and apply the necessary updates.

• NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474
• Citrix Security Advisories

As of 11^th August 2026, SAP is affected by vulnerabilities in the following products:

• SAP Commerce Cloud (Data Hub Adapter)
  • Versions COM_CLOUD 2211 and 2211-JDK21
• SAP Manufacturing Integration and Intelligence
  • Versions XMII 15.4, 15.5, MII_ADMIN 15.4 and 15.5
• SAP NetWeaver and ABAP Platform
  • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.22EXT2, 7.22EXT3, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16 9.18, 9.19, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16, 9.18 and 9.19
• SAP Manufacturing Integration and Intelligence
  • Version MII 15.4, 15.5
• SAP Change and Transport System Attach Tool (ctsattach)
  • Version CTS_UPLOAD_CLT 1
• SAP ABAP Developer Tools
  • Versions AP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816 and SAP_BASIS 918, SAP_BASIS 920
• SAP Commerce Cloud
  • Versions OM_CLOUD 2211, 2211-JDK21 and DHUB_CLOUD 2211, 2211-JDK21
• SAP BusinessObjects Business Intelligence Platform (Central Management Server)
  • Versions AP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816, SAP_BASIS 918, SAP_BASIS 920, ENTERPRISE 430, 2025 and 2027
• SAP Manufacturing Integration and Intelligence
  • Versions MII 15.4 and 15.5

Open-source reporting indicates that CVE-2026-58231 is being exploited in the wild.

Review the SAP Security Patch Day - August 2026 and apply the necessary updates.

As of 13^th August 2026, Zimbra is affected by vulnerabilities in Zimbra Collaboration - Prior to 10.1.20.

Review the provided web links and apply any necessary updates as they become available.

• Zimbra Security Advisories - Zimbra: Tech Center
• Zimbra Responsible Disclosure Policy - Zimbra: Tech Center
• Zimbra: Blog - All Things Zimbra

As of 13^th August 2026, FreePBX is affected by vulnerabilities in the following products:

• backup
  • After or equal to 17.0.5.34, Prior to 17.0.11
• framework
  • After or equal to 17.0.1, Prior to 17.0.30
  • Prior to 16.0.47
• missedcall
  • After or equal to 17.0.1, Prior to 17.0.4
  • Prior to 16.0.11
• music
  • Prior to 17.0.7
• tts
  • After or equal to 17.0.1, Prior to 17.0.5.4
  • Prior to 16.0.6
• ucp
  • Prior to 17.0.9

Review the FreePBX Security Advisories and apply the necessary updates.

As of 11^th August 2026, AMD is affected by vulnerabilities in the following products:

• AMD Power Design Manager (PDM) Software Installer for Windows
  • all except 2026.1
• AMD Power Design Manager (PDM) Software Un-Installer
  • all except 2026.1
• AMD Ryzen Master
  • all except 3.0.0.4199
  • all except 3.1.1.5502
• AMD Ryzen Master (AMD Ryzen 3000 Series Processors)
  • all except 2.14.3.5040
• AMD Ryzen Master Monitoring SDK
  • all except 3.1.1.5478
• AMD Ryzen Master SDK
  • all except 3.0.1.4732
• Vitis Libraries - Security Module
  • all except 2026.1
• Vitis Embedded Single File Download (SFD) for Windows
  • all except 2026.1
• Vitis Unified Installer for FPGAs & Adaptive SoCs in Windows
  • all except 2026.1

Review the provided web links and apply any necessary updates as they become available.

• Vitis Vulnerabilities
• AMD Power Design Manager (PDM) Vulnerabilities
• AMD Ryzen Master Vulnerability
• AMD Product Security

As of 12^th August 2026, GitLab is affected by vulnerabilities in the following product:

• GitLab
  • Prior to 19.0.6
  • Prior to 19.1.4
  • Prior to 19.2.2

Review the GitLab Patch Release: 19.2.2, 19.1.4, 19.0.6 | GitLab Docs and apply any necessary updates.

As of 12^th August 2026, WebPros is affected by a vulnerability in the following product:

• Plesk (Windows/Linux)
  • Prior to 18.0.79.6
  • Prior to 18.0.80.2

Review the Vulnerability CVE-2026-64639: Privilege Escalation via Database Cloning in Plesk and apply the necessary updates.

On 11^th August 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 151.0.7922.137/.138 (Windows/Mac), and 151.0.7922.137 (Linux).

 Review the Google security bulletins and apply the required updates.

As of 11^th August 2026, Cisco is affected by a vulnerability in the following products:

• Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
  • multiple versions
• Cisco Secure Firewall Threat Defense (FTD) Software
  • multiple versions

On 11^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20349 to their Known Exploited Vulnerabilities (KEV) Database.

Review the following provided web links and apply any necessary updates as they become available.

• Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
• Cisco Security Advisories
• CISA KEV: CVE-2026-20349

As of 11^th August 2026, Adobe is affected by vulnerabilities in the following products:

• Adobe Campaign Classic
  • Prior to or equal to ACC v7: 7.4.3 build 9399
• Adobe Commerce
  • Prior to or equal to 2.4.9-2026-jul, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug and 2.4.4-2026-aug
• Adobe Commerce B2B
  • Prior to or equal to 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul and 1.3.3-2026-jul
• ColdFusion 2023
  • Prior to or equal to 2023.0.22
• ColdFusion 2025
  • Prior to or equal to 2025.0.11
• Content Credentials Command-Line Tool
  • Prior to or equal to c2patool-v0.27.5
• Content Credentials JS SDK
  • Prior to or equal to @contentauth/c2pa-web@0.12.0
• Content Credentials Rust SDK
  • Prior to or equal to c2pa-v0.90.5
• Lightroom Classic
  • Prior to or equal to 15.4, 15.4.1, 15.3, 15.3.1, 15.2, 15.2.1
• Magento Open Source
  • Prior to or equal to 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul and 2.4.6-2026-jul

Review the Adobe Product Security Incident Response Team and apply any necessary updates as they become available.

As of 11^th August 2026, SonicWall published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Email Security 10.0.35.8405 and earlier versions
• GMS 9.5.1 and earlier versions

Review the following SonicWall Security Advisory and apply the necessary updates:

• Security Advisory
• Security Advisory (1)
• Security Advisory (2)

As of 11^th August 2026, MongoDB is affected by vulnerabilities in the following products:

• MongoDB Driver
  • Prior to 5.9.2
• MongoDB Server
  • Prior to 7.0.40
  • Prior to 8.0.29
  • Prior to 8.2.13
  • Prior to 8.3.8
  • Prior to 9.0.0-rc2

Review the provided web links and apply any necessary updates as they become available.

• [SERVER-130264] Intra-cluster SASL mechanism allow list missing in egress connection setup, enabling PLAIN downgrade and cleartext keyfile disclosure - MongoDB Jira
• [JAVA-6266] Mask proxy password in ProxySettings toString - MongoDB Jira
• Alerts | MongoDB

As of 12^th August 2026, Fortinet is affected by a vulnerability in the following products:

• FortiClientWindows
  • Prior to or equal to 7.2.11
  • Prior to or equal to 7.4.3
• FortiManager
  • Prior to or equal to 7.61
  • Prior to or equal to 7.4.5
  • Prior to or equal to 7.2.9
• FortiManager Cloud
  • Prior to or equal to 7.61
  • Prior to or equal to 7.4.5
  • Prior to or equal to 7.2.9
• FortiWeb
  • Prior to or equal to 8.0.2
  • Prior to or equal to 7.6.6
  • Prior to or equal to 7.4.11
  • Prior to or equal to 7.2.12

Review the provided web links and apply any necessary updates as they become available.

• PSIRT | FortiGuard Labs
• PSIRT | FortiGuard Labs
• PSIRT | FortiGuard Labs
• Fortinet PSIRT Advisories

As of 11^th August 2026, Grafana is affected by a vulnerability in the following products:

• Grafana MCP Server
  • Prior to or equal to 1.0.0
• mcp-grafana
  • Prior to or equal to 1.0.0

Review the provided web link and apply any necessary updates as they become available.

• Grafana: The open and composable observability platform | Grafana Labs
• CVE-2026-19516 CVE Record

As of 11^th August 2026, SAP is affected by vulnerabilities in the following products:

• SAP Commerce Cloud (Data Hub Adapter)
  • Versions COM-CLOUD 2211 and 2211-JDK21
• SAP Manufacturing Integration and Intelligence
  • Versions XMII 15.4, 15.5, MII-ADMIN 15.4 and 15.5
• SAP NetWeaver and ABAP Platform
  • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.22EXT2, 7.22EXT3, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16 9.18, 9.19, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16, 9.18 and 9.19
• SAP Manufacturing Integration and Intelligence
  • Version MII 15.4, 15.5
• SAP Change and Transport System Attach Tool (ctsattach)
  • Version CTS-UPLOAD-CLT 1
• SAP ABAP Developer Tools
  • Versions AP-BASIS 750, SAP-BASIS 751, SAP-BASIS 752, SAP-BASIS 753, SAP-BASIS 754, SAP-BASIS 755, SAP-BASIS 756, SAP-BASIS 757, SAP-BASIS 758, SAP-BASIS 816 and SAP-BASIS 918, SAP-BASIS 920
• SAP Commerce Cloud
  • Versions OM-CLOUD 2211, 2211-JDK21 and DHUB-CLOUD 2211, 2211-JDK21
• SAP BusinessObjects Business Intelligence Platform (Central Management Server)
  • Versions AP-BASIS 750, SAP-BASIS 751, SAP-BASIS 752, SAP-BASIS 753, SAP-BASIS 754, SAP-BASIS 755, SAP-BASIS 756, SAP-BASIS 757, SAP-BASIS 758, SAP-BASIS 816, SAP-BASIS 918, SAP-BASIS 920, ENTERPRISE 430, 2025 and 2027
• SAP Manufacturing Integration and Intelligence
  • Versions MII 15.4 and 15.5

Review the SAP Security Patch Day - August 2026 and apply the necessary updates.

As of 11^th August 2026, Rapid7 is affected by a vulnerability in Velociraptor prior to 0.77.2.

Review the CVE-2026-18972 Velociraptor authenticated identity-spoofing … and apply the necessary updates.

As of 10^th August 2026, AMD is affected by vulnerabilities in the following products:

• AMD EPYC Series Processors
• AMD EPYC Embedded Series Processors

Review the provided web links and apply any necessary updates as they become available.

• Extracting VM Secrets through Power Side Channels on AMD SEV-ES and SEV-SNP
• AMD Product Security

As of 11^th August 2026, Microsoft is affected by vulnerabilities in the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• App Installer
• Application Insights Profiler
• Azure Active Directory
• Azure Confidential Ledger
• Azure CycleCloud
• Azure Kubernetes Service
• Azure Logic Apps
• Azure Monitor Agent Linux Extension
• Azure SQL Database
• Azure SQL Managed Instance
• Azure SRE Agent
• Azure Service Bus
• Azure Storage Explorer
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
• Microsoft .NET Framework 3.5 AND 4.7.2
• Microsoft .NET Framework 3.5 AND 4.8
• Microsoft .NET Framework 3.5 AND 4.8.1
• Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
• Microsoft .NET Framework 4.8
• Microsoft .NET Framework 4.8.1
• Microsoft 365 Admin Center
• Microsoft 365 Apps for Enterprise
• Microsoft Access 2016
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics 365 (on-premises)
• Microsoft Dynamics 365 Business Central 2024
• Microsoft Dynamics 365 Business Central 2026
• Microsoft Dynamics 365 Business Central Release Wave 1 2025
• Microsoft Dynamics 365 Business Central Release Wave 2 2025
• Microsoft Entra Connect
• Microsoft Entra ID
• Microsoft Entra Provisioning Service
• Microsoft Excel 2016
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2019
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365 for Mac
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Outlook 2016
• Microsoft Planetary Computer Pro (GeoCatalog)
• Microsoft Power Apps
• Microsoft PowerPoint 2016
• Microsoft Purview eDiscovery
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Online
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Teams
• Microsoft Teams for Android
• Microsoft Teams for iOS
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Visual Studio Code CoPilot Chat Extension
• Microsoft Word 2016
• OneDrive for MacOS
• Power BI Report Server
• PowerShell 7.4
• PowerShell 7.5
• PowerShell 7.6
• Python extension for Visual Studio Code
• Visual Studio Code
• Windows 10
• Windows 11
• Windows App Client for Windows Desktop
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025

Review the Microsoft Security Updates and apply the necessary updates (Security Update Guide).

On 11^th August 2026, Ivanti published security advisories to address vulnerabilities in Ivanti Endpoint Manager – version prior to or equal to 2024 SU6.

Review the Ivanti Innovators Hub advisories and apply the necessary updates:

As of 7^th August 2026, Dell is affected by vulnerabilities in the following products:

·       Dell OpenManage Server Administrator Managed Node (Patch) for Windows

o   Prior to 11.1.0.2

·       Dell OpenManage Server Administrator Managed Node for RHEL 8.10

o   Prior to 11.1.0.2

·       Dell OpenManage Server Administrator Managed Node for RHEL 9.4

o   Prior to 11.1.0.2

·       Dell OpenManage Server Administrator Managed Node for SLES 15

o   Prior to 11.1.0.2

·       OpenManage Server Administrator Managed Node (Patch) for Windows

o   Prior to 11.1.0.2

·       RVTools

o   Prior to 4.8.1

·       Virtual Storage Integrator for VMware vSphere Client

o   Prior to 10.11.1.0

Review the provided web links and apply any necessary updates as they become available.

• DSA-2026-335: Security Update for Dell Virtual Storage Integrator for VMware vSphere Client Multiple Vulnerabilities
• DSA-2026-326: Security Update for Dell OpenManage Server Administrator (OMSA) Network Access Vulnerabilities
• DSA-2026-325: Security Update for Dell RVtools Vulnerability
• Security Advisories, Notices and Resources

As of 7^th August 2026, IBM is affected by vulnerabilities in the following products:

• Application Gateway Operator
  • Prior to or equal to 26.06
• Big SQL on IBM Cloud Pak for Data
  • Version Big SQL 7.7 on Cloud Pak for Data 5.0
• Big SQL on IBM Software Hub
  • Multiple versions
• Business Automation Workflow containers and traditional
  • 26.0.0
  • Prior to or equal to 24.0.0 Interim Fix 009
  • Prior to or equal to 24.0.1 Interim Fix 007
  • Prior to or equal to 25.0.0 Interim Fix 005
• Cloud APM, Advanced/Base Private
  • Prior to or equal to 8.1.4
• Cloud Pak For Business Automation
  • 24.0.0
  • 24.0.1
  • 25.0.0
  • 26.0.0
• IBM Event Streams version
  • 13.0.1
• Langflow OSS
  • Prior to or equal to 1.10.3
• Maximo Application Suite
  • 9.0
  • 9.1
  • 9.2
• IBM Netezza Appliance
  • 1.0.2.0
• Operational Decision Manager
  • Multiple versions
• PowerVC
  • Multiple versions
• Process Automation Manager Open Edition Starter Kit for Banking
  • Prior to or equal to 9.4.1
• SevOne Network Performance Management (Data Insight)
  • Prior to or equal to 8.2.2
• QRadar
  • Prior to or equal to 7.5.0 UP 15 Interim Fix 005
  • Prior to or equal to 7.6.0.1
• Security Verify Information Queue
  • Multiple versions
• Storage Protect Operations Center
  • Versions prior or equal to 8.1 and 8.2
• webMethods Managed File Transfer (on-prem)
  • Prior to or equal to 11.1 and 12.1
• WebSphere Application Server
  • 8.5
  • 9.0
• WebSphere Application Server - Liberty
  • Continuous delivery

Review the provided web link and apply the necessary updates.

• IBM Product Security Incident Response

As of 7^th August 2026, WebPros is affected by a vulnerability in the following product:

• Plesk Obsidian
  • Prior to 18.0.80.1 and 18.0.79.5

Review the CVE-2026-64636 Vulnerability in Plesk: blind SQL injection and apply the necessary updates.

As of 7^th August 2026, HashiCorp is affected by vulnerabilities in the following products:

• Consul Community Edition
  • Prior to 2.0.3
• Consul Enterprise
  • Prior to 2.0.3
  • Prior to 1.22.11
  • Prior to 1.21.17

Review the provided web links and apply any necessary updates as they become available.

• HCSEC-2026-25 - Multiple vulnerabilities impacting HashiCorp Consul - Security - HashiCorp Discuss
• Security - HashiCorp Discuss

As of 7^th August 2026, WordPress published a security advisory to address vulnerabilities in WordPress prior to 7.0.3.

Open-source reporting indicates that CVE-2026-64638 is being exploited in the wild.

Review the provided web link and apply any necessary updates as they become available.

• WordPress 7.0.3 release - WordPress News

On 9^th August 2026, Roundcube is affected by vulnerabilities in the following product:

• Roundcube Webmail
  • prior to 1.6.18
  • prior to 1.7.3

Review the provided web links and apply the necessary updates.

• Security updates 1.6.18 and 1.7.3 released
• Roundcube Webmail 1.6.18
• Roundcube Webmail 1.7.3
• Roundcube Open Source Webmail Software

As of 7^th August 2026, Cisco is affected by vulnerabilities in the following product:

• Secure Endpoint Connector for Linux
• Secure Endpoint Connector for Mac
• Secure Endpoint Connector for Windows
• Cisco Secure Endpoint Private Cloud
  • Prior to 8.4.5.30483

Review the provided web link and apply any necessary updates as they become available.

• ClamAV Vulnerabilities Affecting Cisco Products: August 2026
• Cisco Security Advisories

As of 3^rd August 2026, Qualcomm published a security bulletin to address vulnerabilities affecting Qualcomm products.

Review the Qualcomm Security Bulletin - August and apply the necessary updates.

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI), in collaboration with U.S. government and international partners, released a joint Cybersecurity Advisory, Gunra Ransomware, part of an ongoing series detailing ransomware variants and threat actors. This joint advisory provides technical details on Gunra activity, along with detection and mitigation guidance to help protect at-risk organizations across government and critical infrastructure.

Gunra first emerged in April 2025 and expanded to a formal ransomware-as-a-service (RaaS) affiliate program advertised on dark web forums. Gunra actors use a double-extortion model, meaning actors both encrypt and exfiltrate sensitive data to create two forms of leverage for collecting ransom payments. They demand ransom via a Tor-based negotiation portal and threaten to publish stolen data on their dedicated leak site (DLS) if victim organizations do not pay within 5 to 7 days. As part of the 2026 expansion, Gunra actors have adopted branding aliases (including Golden Community) and further commercialized by actively recruiting penetration testers and ethical hackers as initial access brokers in exchange for a share of ransom profits. They have also demonstrated the ability to disable backup features and, in one instance, prevent restoration by deleting backup and archived data stored at both a primary data center and a disaster recovery center. Victim organizations listed on Gunra's DLS site come from multiple sectors worldwide.

CISA, the FBI, and authoring agencies urge organizations to implement the advisory's mitigations, including the following key actions:

• Prioritize patching in internet-facing systems, including virtual private network (VPN) gateways and remote desktop protocol (RDP)-exposed infrastructure.
• Implement and test offline, immutable backups stored in a physically separate, segmented location to ensure recoverability without ransom payment.
• Segment networks to restrict lateral movement from an initially compromised device to other systems in the organization.

Read the full advisory for more information on how to protect your organization from Gunra.

On 9^th August 2026, BDNCIRT issued an Advisory regarding The Gentlemen Ransomware: A Rapidly Scaling RaaS Threat Targeting Bangladesh.

Review the advisory about The Gentlemen Ransomware: A Rapidly Scaling RaaS Threat Targeting Bangladesh and take the necessary action.

On 6^th August 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 151.0.7922.108/.109 (Windows/Mac), and 151.0.7922.108 (Linux).

Review the Google security bulletins and apply the required updates.

Between 2^nd and 4 ^th June 2026, Progress published security advisories to address vulnerabilities in the following products. Included was a critical update for the following:

• Sitefinity CMS and Sitefinity Insight - multiple versions
• Progress Kemp LoadMaster - version GA v7.2.63.1 and prior
• Progress Kemp LoadMaster - version LTSF v7.2.54.17 and prior

• Sitefinity Security Advisory for Addressing Security Vulnerabilities CVE-2026-7312, CVE-2026-7198, CVE-2026-7195, CVE-2026-7201, CVE-2026-7313, May 2026
• LoadMaster Critical Security Bulletin – June 2026 – (CVE-2026-8037, CVE-2026-33691)
• Progress Trust Center
• CISA KEV: CVE-2026-8037

As of 5^th August 2026, GitHub is affected by vulnerabilities in the following product:

• Enterprise Server
  • 3.17.0 Prior to 3.17.16
  • 3.17.0 Prior to 3.17.19
  • 3.18.0 Prior to 3.18.10
  • 3.18.0 Prior to 3.18.13
  • 3.19.0 Prior to 3.19.10
  • 3.19.0 Prior to 3.19.7
  • 3.20.0 Prior to 3.20.3
  • 3.20.0 Prior to 3.20.6
  • 3.21.0 Prior to 3.21.4

• Release notes - GitHub Enterprise Server 3.17 Docs
• Release notes - GitHub Enterprise Server 3.18 Docs
• Release notes - GitHub Enterprise Server 3.19 Docs
• Release notes - GitHub Enterprise Server 3.20 Docs
• Release notes - GitHub Enterprise Server 3.21 Docs
• GitHub Enterprise Server releases - GitHub Enterprise Server 3.19 Docs

As of 6^th August 2026, Foxit is affected by a vulnerability in the Foxit PDF Services API - before 2026-07-27.

Review the provided Security Bulletins | Foxit and apply the necessary updates.

As of 5^th August 2026, Cisco is affected by vulnerabilities in the following products:

• Cisco Catalyst SD-WAN Release
  • prior to 20.9.10
  • prior to 20.12.8.1
  • prior to 20.15.6
  • prior to 20.18.4
  • prior to 26.1.2

• Cisco IOS XE Software Release
  • prior to 17.9.10
  • prior to 17.12.8
  • prior to 17.15.6
  • prior to 17.18.4 and 17.18.4a
  • prior to 26.1.2

• Cisco Secure FMC Software Release
  • prior to Cisco_Firepower_Mgmt_Center_Hotfix_GB-7.0.9.1-3.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_HL-7.2.11.1-4.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_HG-7.4.7.1-3.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_CY-7.6.5.1-2.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_AM-7.7.12.1-2.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_P-10.0.1.1-2.sh.REL.tar

• Cisco IOS XE Software with SNMPv1
• Cisco IOS XE Software with SNMPv2c
• Cisco IOS XE Software with SNMPv3
• Cisco IOS XE Software with BEEP feature enabled
• Cisco IOS Software or IOS XE Software with XMCP Server feature enabled

• Cisco NFVIS Release
  • prior to 4.12
  • prior to 4.13
  • prior to 4.14
  • prior to 4.15

• Cisco UCS Server Software Release
  • prior to 4.2
  • prior to 4.3
  • prior to 6.0
  • prior to 3.2
  • prior to 4.15
  • prior to 4.3

• Cisco Telemetry Broker Appliances
  • prior to 6.0(2.260143)

• IEC6400 Edge Compute Appliances
  • prior to 4.3(6.260054)

• IOS XRv 9000 M7 Appliances
  • prior to 6.0(2.260143)

• Secure Endpoint Private Cloud Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 4.3(6.260054) (M6)

• Secure Firewall Management (FMC) Center Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 6.0(2.260143) (M6, M8)

• Secure Malware Analytics Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 4.3(6.260054) (M6)

• Secure Network Analytics Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 6.0(2.260143) (M6)

• prior to 4.3(2.260020) (M5)

• prior to 6.0(2.260143) (M6, M8)

• Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026
• Cisco IOS XE Software Security Hardening Release: August 2026
• Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability
• Cisco IOS XE Software SNMP Denial of Service Vulnerability
• Cisco Security Advisories

As of 4^th August 2026, Django is affected by vulnerabilities in the following product:

• Django
  • before 6.0.8
  • before 5.2.17

As of 4^th August 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following product:

• EdgeConnect SD-WAN Orchestrator
  • Prior to or equal to 9.6.2.40208
  • Prior to or equal to 9.6.3.40137

Review the provided web links and apply any necessary updates as they become available.

• HPESBNW05100 rev.1 - Multiple Vulnerabilities in HPE Networking EdgeConnect Orchestrator 9.6 branch
• HPE Security Bulletin Library

As of 27^th July 2026, JetBrains is affected by a vulnerability in the TeamCity - prior to version 2026.1.3 and 2025.11.7.

Review the provided web links and apply any necessary updates as they become available.

On 5^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-63077 to their Known Exploited Vulnerabilities (KEV) Database.

• Fixed security issues
• Security - The JetBrains Blog
• CISA KEV: CVE-2026-63077

On 4^th August 2026, Zyxel published security advisories to address vulnerabilities in the following products:

• ATP series firmware
  • from V4.32 through V5.42 Patch 1
• USG FLEX 50(W) series firmware
  • from V4.16 through V5.42 Patch 1
• USG FLEX series firmware
  • from V4.50 through V5.42 Patch 1
• USG20(W)-VPN series firmware
  • from V4.16 through V5.42 Patch 1
• WAX650S firmware
  • Prior to or equal to 7.10(ABRM.4)C0

• Zyxel security advisory for path traversal vulnerability in the configuration file execution CLI command of ZLD firewalls
• Zyxel security advisory for command injection and improper authentication vulnerabilities in certain APs, FWA7, and Security Routers | Zyxel Networks

As of 5^th August 2026, Progress Software Corporation is affected by vulnerabilities in the following product:

• MarkLogic Server
  • Prior to 11.3.6
  • Prior to 12.0.3

• Marklogic Critical Security Alert Bulletin - August 2026 – (CVE-2026-7326, CVE-2026-7327, CVE-2026-7329, CVE-2026-7557, CVE-2026-8709, CVE-2026-9190, CVE-2026-9192, CVE-2026-9193, CVE-2026-9195, CVE-2026-9203)
• Progress Trust Center

As of 5^th August 2026, the Jenkins Project is affected by vulnerabilities in the following products:

• Jenkins
  • ALL except 2.568.2
  • ALL except 2.576

• Jenkins AWS CodeBuild Plugin
  • Prior to or equal to 0.59

• Jenkins CodeSonar Plugin
  • Prior to or equal to 3.6.0

• Jenkins Google Chat Notification Plugin
  • Prior to or equal to 166.ve6b_de280f2e8

• Jenkins Horreum Plugin
  • Prior to or equal to 0.16.162.v33b_4a_a_b_5f828

• Jenkins Ivy Report Plugin
  • Prior to or equal to 1.2

• Jenkins Multijob Plugin
  • Prior to or equal to 669.v9d96a_d9c71b_0

• Jenkins Violation Comments to GitLab Plugin
  • Prior to or equal to 2.62.0

• Jenkins XML Job to Job DSL Plugin
  • Prior to or equal to 0.1.13

• Remoting
  • ALL except 3355.3357.v931d3c992987
• ALL except 3385.vf1123fb_515da_

• Jenkins Security Advisory 2026-08-05
• Security Advisories

As of 30^th July 2026, IBM is affected by vulnerabilities in the following products:

• App Connect Enterprise
  • Prior to or equal to 12.0.12.27
  • Prior to or equal to 13.0.7.2
• DataPower Gateway 10.5.0
  • Prior to or equal to 10.5.0.21
• DataPower Gateway 10.6.0
  • Prior to or equal to 10.6.0.9
• DataPower Gateway 10.6CD
  • Prior to or equal to 10.6.6
• DataPower Gateway 11.0.0
  • Prior to or equal to 11.0.0.1
• Db2
  • Prior to or equal to 11.5.9
  • Prior to or equal to 12.1.4
• Engineering Requirements Management DOORS and DOORS Web Access
  • Prior to or equal to 9.6.1.13
  • Prior to or equal to 9.7.2.11
• Enterprise Build of Quarkus
  • Prior to or equal to 3.27.4.SP2
  • Prior to or equal to 3.33.2.SP2
• HMC V10.3.1050.0
  • Prior to or equal to 10.3.1064.0
• HMC V11.1.1110.0
  • Prior to or equal to 11.1.1112.0
• Langflow OSS
  • Prior to or equal to 1.10.0
  • Prior to or equal to 1.10.1
  • Prior to or equal to 1.8.4
• Operations Analytics - Log Analysis
  • 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3
  • 1.3.6.0, 1.3.6.1
  • 1.3.7.0, 1.3.7.1, 1.3.7.2
  • 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4
• Planning Analytics Local
  • Prior to or equal to 2.1.21
• PowerVM Hypervisor
  • Prior to or equal to FW1060.71
  • Prior to or equal to FW1110.20
  • Prior to or equal to FW950.H1
• Security Verify Access
  • Prior to or equal to 10.0.9.1
• Security Verify Access Container
  • Prior to or equal to 10.0.9.1
• UCD - IBM DevOps Deploy
  • Prior to or equal to 8.0.1.13
  • Prior to or equal to 8.1.2.6
  • Prior to or equal to 8.2.1.0
• UCD - IBM UrbanCode Deploy
  • Prior to or equal to 7.2.3.23
  • Prior to or equal to 7.3.2.18
• Verify Identity Access
  • Prior to or equal to 11.0.2
• Verify Identity Access Container
  • Prior to or equal to 11.0.2
• WebSphere Application Server
  • 8.5
  • 9.0
• WebSphere Application Server - Liberty
  • Prior to or equal to 26.0.0.7
• webMethods Integration (on prem)
  • 10.15, 10.11

On 4^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-9198 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web link and apply the necessary updates.

• IBM Product Security Incident Response
• CISA KEV: CVE-2026-9198

As of 4^th August 2026, Dell is affected by vulnerabilities in the following products:

• Display and Peripheral Manager (DDPM Mac)
  • Prior to 2.3.0.1005
• Monitor driver
  • Prior to 1.0.0.0

Review the provided web links and apply any necessary updates as they become available.

• DSA-2026-295: Security Update for Dell Monitor Driver for an Improper Link Resolution Before File Access ('Link Following') Vulnerability | Dell US
• DSA-2026-319 Security Updates for Dell Display and Peripheral Manager (DDPM Mac) for Multiple Vulnerabilities | Dell US
• Security Advisories, Notices and Resources | Dell Canada

On 3^rd August 2026, Tenable published a security advisory to address vulnerabilities in Sensor Proxy - Prior to version 1.4.2.

Review the following Tenable Security Advisory and apply the necessary updates:

• [R1] Sensor Proxy Version 1.4.2 Fixes One Vulnerability - Security Advisory | Tenable®
• Tenable Product Security Advisories

As of 3^rd August 2026, MISP published a security advisory to address vulnerabilities in the MISP (Malware Information Sharing Platform) cti-transmute – prior to or equal to version 1.4.0.

Review the provided web link and apply the necessary updates.

• fix: [website] Block file and network fetches in the evaluation PDF r… · MISP/cti-transmute@20f3530 · GitHub
• fix: [website] Cap the activity-timeline day range · MISP/cti-transmute@321892d · GitHub
• fix: [website] Require POST to delete a user · MISP/cti-transmute@4f0d051 · GitHub

As of 3^rd August 2026, N-able published a security advisory to address vulnerabilities in N-central  – prior to version 2026.3.1.7.

On 3^rd August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-18577 to their Known Exploited Vulnerabilities (KEV) Database.

On 4^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-18556 to their Known Exploited Vulnerabilities (KEV) Database.

• 2026.3 HF1 Release Notes
• N-central 2026.3 Hotfix 1 – Mitigation for CVE-2026-18577 | N-able Status
• Release Notes | N-able Status
• CISA KEV:CVE-2026-18577
• CISA KEV: CVE-2026-18556

On 3^rd August 2026, Adobe published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• Adobe Campaign Classic

• ACC v7: 7.4.3 build 9398 and prior

• Adobe Premiere

• 26.2.2 and prior

• Adobe Premiere Pro

• 25.6.5 and prior

Review the provided web links and apply any necessary updates as they become available.

• Security update available for Adobe Campaign Classic | APSB26-120
• Security Updates Available for Adobe Premiere Pro | APSB26-76
• Adobe Product Security Incident Response Team

As of 4^th August 2026, Veeam is affected by vulnerabilities in the following products:

·       ONE

o   Prior to or equal to 13.1.0.7034

·       Service Provider Console

o   Prior to 9.3.0.35057

Review the provided web links and apply any necessary updates as they become available.

·       KB4893: Vulnerabilities Resolved in Veeam Service Provider Console 9.3

·       KB4892: Vulnerabilities Resolved in Veeam ONE 13.1

·       Veeam Support Knowledge Base

As of 3^rd August 2026, Check Point published a security advisory to address vulnerabilities in the following products. Included was a critical update for the following :

• Multi-Domain Security Management Server (MDS)

• R80
• R80.10
• R80.20
• R80.30
• R80.40
• R81
• R81.10
• R81.20 with Jumbo Hotfix Accumulator Take 160 or below
• R82 with Jumbo Hotfix Accumulator Take 121 or below
• R82.10 with Jumbo Hotfix Accumulator Take 39 or below

• Security Management Server

• R80
• R80.10
• R80.20
• R80.30
• R80.40
• R81
• R81.10
• R81.20 with Jumbo Hotfix Accumulator Take 160 or below
• R82 with Jumbo Hotfix Accumulator Take 121 or below
• R82.10 with Jumbo Hotfix Accumulator Take 39 or below

Review the provided web links and perform the suggested mitigations.

• sk185222 - CVE-2026-18574 - Management Authentication Bypass
• Check Point Security

As of 30^th July 2026, Rails is affected by vulnerabilities in the following product:

• Rails

• Prior to 8.0.5.1
• Prior to 8.1.3.1
• Prior to 7.2.3.2

Review the provided web links and apply any necessary updates as they become available.

• Release 7.2.3.2 · rails/rails - GitHub
• Release 8.0.5.1 · rails/rails - GitHub
• Release 8.1.3.1 · rails/rails - GitHub
• [CVE-2026-66066] Possible arbitrary file read and remote code execution in Active Storage variant processing
• Release list - rails/rails

On 30^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 151.0.7922.71/.72  (Windows/Mac), and 151.0.7922.71 (Linux).

Review the Google security bulletins and apply the required updates.

As of 30^th July 2026, Spring is affected by vulnerabilities in the following products:

• Spring Tools for Eclipse
  • Prior to or equal to 5.2.0
• Spring Tools for VSCode / Cursor / Theia
  • Prior to or equal to 2.2.0

Review the provided web links and apply any necessary updates as they become available.

• CVE-2026-47858: live information startup mode is vulnerable for remote code execution
• CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
• CVE-2026-47882: Spring Boot DevTools remote secret generated with a non-cryptographic PRNG
• CVE-2026-59326: HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server
• CVE-2026-59327: Cleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch Configurations
• CVE-2026-59328: Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips
• Spring | Security Advisories

As of 30^th July 2026, VMware is affected by vulnerabilities in the following products:

• Cloud Foundation
  • 5.x
  • 9.0.x.x
  • 9.1.x.x
  • Prior to 5.2.3
• ESX
  • Prior to ESXi-9.0.2.0100-25595025
  • Prior to ESXi-9.1.0.0-25370933
  • Prior to ESXi-9.1.0.0200-25557999
  • Prior to ESXi80U3i-25205845
  • Prior to ESXi80U3k-25595708
• Fusion
  • Prior to 26H1
• Telco Cloud Infrastructure
  • 3.0
• Telco Cloud Platform
  • 4.x
  • 5.0.x
  • 5.1.x
• Workstation
  • Prior to 26H1
• vCenter
  • Prior to 8.0 U3k
  • Prior to 9.0.2.0100
  • Prior to 9.1.0.0300
• vSphere Foundation
  • 9.0.x.x
  • 9.1.x.x

Review the following advisories and apply the necessary updates:

• VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)
• Security Advisories - VMware Cloud Foundation

As of 30^th July 2026, PHP Group is affected by vulnerabilities in the following product:

• PHP
  • Prior to 8.2.33
  • Prior to 8.3.33
  • Prior to 8.4.24
  • Prior to 8.5.9

Review the provided web links and apply any necessary updates as they become available.

• SQL injection in ext-pgsql via E'...' backslash breakout
• Out-of-bounds write in bccomp() via crafted operand and scale

As of 30^th July 2026, SolarWinds published security advisories to address vulnerabilities in the SolarWinds Web Help Desk (WHD) - prior to 2026.2.1.

Review the provided web links and apply the necessary updates.

• WHD 2026.2.1 release notes
• SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability (CVE-2026-28323)
• SolarWinds Security Vulnerabilities

On 30^th July 2026, BDNCIRT issued an Advisory regarding SideWinder Spear-Phishing Campaign Against Bangladesh Leveraging Dual-Format Weaponized Documents.

Review the advisory about SideWinder Spear-Phishing Campaign and take the necessary action.

On 29^th July 2026, VMware published security advisories to address vulnerabilities in the following products:

• VMware ESX version 8.0
• VMware vCenter version 8.0 (Fixed in 8.0 U3k)
• VMware Workstation version 25H2
• VMware Fusion version 25H2
• VMware Cloud Foundation versions 9.1.x.x (Fixed in 9.1.0.0300)
• VMware Cloud Foundation versions 9.0.x.x (Fixed in 9.0.2.0100)
• VMware Cloud Foundation versions 5.x (Async patch to 8.0 U3k)
• VMware vSphere Foundation versions 9.1.x.x (Fixed in 9.1.0.0300)
• VMware vSphere Foundation versions 9.0.x.x (Fixed in 9.0.2.0100)
• VMware Telco Cloud Platform versions 3.0, 4.x, 5.0.x, 5.1.x
• VMware Telco Cloud Infrastructure version 3.0

Review the Broadcom VMware Security Advisory and apply the necessary updates.

On 28^th July 2026, Adobe published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• Adobe Bridge

• Prior to 15.1.7
• Prior to 16.0.6

• Format Plugins

• Prior to 2026.07

Review the provided web links and apply any necessary updates as they become available.

• Security updates available for Adobe Format Plugins | APSB26-87
• Security Updates Available for Adobe Bridge | APSB26-89
• Adobe Product Security Incident Response Team

As of 29^th July 2026, Cisco is affected by a vulnerability in the following product:

• Cisco Secure Firewall Management Center (FMC)

• Prior to 7.0.9.1
• Prior to 7.2.11.1
• Prior to 7.4.7.1
• Prior to 7.6.5.1
• Prior to 7.7.12.1
• Prior to 10.0.1.1

Cisco has indicated that CVE-2026-20316 is being exploited.

On 29^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20316 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply any necessary updates as they become available.

• Cisco Security Advisories
• Cisco Secure Firewall Management Center Software Static Credential Vulnerability
• CISA KEV : CVE-2026-20316

As of 29^th July 2026, GitLab is affected by vulnerabilities in the following product:

• GitLab
  • Prior to 19.0.5
  • Prior to 19.1.3
  • Prior to 19.2.1

Review the provided web links and apply any necessary updates as they become available.

• GitLab Patch Release: 19.2.1, 19.1.3, 19.0.5
• GitLab release notes

On 27^th July 2026, Apache published a security advisory to address vulnerabilities in Apache Thrift prior to 0.24.0.

Review the provided web link and apply the necessary updates.

• CVE-2026-48586: Apache Thrift: TZlibTransport Decompression Size Limit
• CVE-2026-49158: Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb
• CVE-2026-55969: Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()
• CVE-2026-58023: Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path

As of 27^th July 2026, Arista Networks is affected by vulnerabilities in the following product:

• VeloCloud Orchestrator On-Prem
  • from 5.2.0 to versions prior to 5.2.3.14
  • from 6.1.0 to versions prior to 6.1.3.4
  • from 6.4.0 to versions prior to 6.4.2.4
  • from 7.0.0 to versions prior to 7.0.0.1

On 27^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-16812 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply any necessary updates as they become available.

• Security Advisory 0144
• Security Advisory 0145
• CISA KEV: CVE-2026-16812

On 27^th July 2026, JetBrains is affected by a vulnerability in the following product:

• TeamCity
  • Prior to 2026.1.3, 2025.11.7

Review the provided web links and apply any necessary updates as they become available.

• Fixed security issues
• Security - The JetBrains Blog

As of 27^th July 2026, Apple is affected by vulnerabilities in the following products:

• iOS and iPadOS
  • Prior to 26.6
• macOS
  • Prior to 14.8.8
  • Prior to 15.7.8
  • Prior to 26.6
• tvOS
  • Prior to 26.6
• visionOS
  • Prior to 26.6
• Safari
  • Prior to 26.6
• watchOS
  • Prior to 26.6

Review the provided web link and apply any necessary updates as they become available.

• Apple security releases - Apple Support

On 26^th July 2026, Microsoft published a security update to address vulnerabilities in Microsoft Edge (Chromium-based) prior to 150.0.4078.99.

Review the provided web links and apply any necessary updates as they become available.

• Security Update Guide - Microsoft Security Response Center
• Security Update Guide - Microsoft Security Response Center (1)
• Security Update Guide - Microsoft Security Response Center (2)
• Security Update Guide - Microsoft Security Response Center (3)

On 25^th July 2026, Redis published security advisories addressing vulnerabilities in Redis versions prior to 8.8.0.

Review the following Redis Security Advisory and apply the necessary updates:

• Comparing 8.6.4...8.8.0
• Reject corrupt stream RDB with shared NACK across consumers #15081
• Releases · redis/redis · GitHub

On 10^th February 2026, Fortinet published security advisories to address vulnerabilities in the following products:

• FortiAuthenticator 6.6 - versions 6.6.0 to 6.6.6
• FortiAuthenticator 6.5 - all versions
• FortiAuthenticator 6.4 - all versions
• FortiAuthenticator 6.3 - all versions
• FortiClientWindows 7.4 - versions 7.4.0 to 7.4.4
• FortiClientWindows 7.2 - versions 7.2.0 to 7.2.12
• FortiClientWindows 7.0 - all versions
• FortiOS 7.6 - versions 7.6.0 to 7.6.4
• FortiOS 7.4 - versions 7.4.0 to 7.4.10
• FortiOS 7.2 - all versions
• FortiOS 7.0 - all versions
• FortiOS 6.4 - all versions
• FortiSandbox 5.0 - version 5.0 to 5.1
• FortiSandbox 4.4 - version 4.4.0 to 4.4.7
• FortiSandbox 4.2 - all versions
• FortiSandbox 4.0 - all versions

On 27^th July 27, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-68686 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web link and apply the necessary updates.

• Fortinet PSIRT Advisories
• CISA KEV: CVE-2025-68686

On 23^rd July 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 150.0.4078.96.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 23^rd July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.186/.187 (Windows/Mac), and 150.0.7871.186 (Linux).

Review the Google security bulletins and apply the required updates.

On 22^nd July 2026, MongoDB published security advisories to address vulnerabilities in the following products:

• MongoDB Compass - versions prior to 1.49.7
• MongoDB Server - versions prior to 7.0.39
• MongoDB Server - versions prior to 8.0.28
• MongoDB Server - versions prior to 8.2.12
• MongoDB Server - versions prior to 8.3.7

Review the provided web links and apply the necessary updates.

• Security Related: Common Vulnerabilities and Exposures (CVEs)
• MongoDB Alerts

On 23^rd July 2026, Progress published a security update to address vulnerabilities in the following products.

• MOVEit Transfer - versions prior to 2025.1.5
• MOVEit Transfer - versions prior to 2026.0.3

Review the provided web links and apply the necessary updates:

• MOVEit Transfer 2026 Release Notes - Fixed Issues in 2026.0.3
• Progress Trust Center

On 22^nd July 2026, Check Point published a security advisory to address vulnerabilities in the following products. Included was a critical update for the following :

• Security Management, Multi-Domain Management - multiple versions
• Firewall, Multi-Domain Management, Multi-Domain Log Server - multiple versions

Check Point is aware that CVE-2026-16232 is being exploited in the wild.

On 22^nd July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-16232 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and perform the suggested mitigations.

• Security Advisory - Action Required - July 2026 Security Update
• Check Point Security
• CISA KEV: CVE-2026-16232

On 14^th July 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• Age of Empires II: Definitive Edition Game
• Azure Active Directory
• Azure CycleCloud 8.9.1
• Azure Monitor Agent Metrics Extension
• Azure Open AI
• Azure Spring Apps
• Azure Synapse
• Fabric Data Warehouse
• GitHub Copilot Plugin for JetBrains IDEs
• Microsoft .NET Framework
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 4.8.1
• Microsoft 365 Apps
• Microsoft 365 Apps for Enterprise
• Microsoft 365 Copilot
• Microsoft 365 Copilot for Android
• Microsoft 365 Copilot for iOS
• Microsoft Bing Search for iOS
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics NAV 2018
• Microsoft Edge (Chromium-based)
• Microsoft Entra Provisioning Service
• Microsoft Excel 2016
• Microsoft Exchange Online
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2019
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft Malware Protection Engine
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365 for Mac
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Office for Android
• Microsoft PC Manager
• Microsoft PowerPoint 2016
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Surface Go 2
• Microsoft Surface Go 3
• Microsoft Surface Hub
• Microsoft Surface Hub 2S
• Microsoft Surface Hub 3
• Microsoft Surface Laptop Go
• Microsoft Surface Laptop Go 2
• Microsoft Surface Laptop Go 3
• Microsoft Surface Pro 7+
• Microsoft Surface Pro 8
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Word 2016
• AspNet.OData
• AspNetCore.OData
• Minecraft Bedrock Dedicated Server
• Office Online Server
• Power BI Report Server
• Surface Laptop 4 with AMD Processor
• Surface Laptop 4 with Intel Processor
• Surface Windows Dev Kit
• Visual Studio Code
• Windows 10
• Windows 11
• Windows 11 Version
• Windows Admin Center
• Windows Remote Help
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025
• Windows Subsystem for Linux (WSL2)
• Windows Terminal for Windows 10
• Windows Terminal for Windows 11

Microsoft has indicated that CVE-2026-56164 and CVE-2026-56155 are being exploited.

On 14^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-56164 and CVE-2026-56155 to their Known Exploited Vulnerabilities (KEV) Database.

On 16^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-58644 to their Known Exploited Vulnerabilities (KEV) Database.

Open-source reporting indicates that CVE-2026-50522 is being exploited in the wild.

On 22^nd July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-50522 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• July 2026 Security Updates
• Security Update Guide
• CISA KEV: CVE-2026-56164
• CISA KEV: CVE-2026-56155
• CISA KEV: CVE-2026-58644
• CISA KEV: CVE-2026-50522

On 23^rd July 2026, JetBrains published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products:

• JetBrains GoLand - versions prior to 2026.2
• JetBrains IntelliJ IDEA - version prior to 2026.2
• JetBrains PhpStorm - version prior to 2026.2
• JetBrains PyCharm - version prior to 2026.1.4 and 2026.2
• JetBrains TeamCity - version prior to 2026.1.2 and 2025.11.6
• JetBrains WebStorm - version prior to 2026.2

Review the JetBrains - Fixed security issues and apply the necessary updates.

On 21^st July 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Aruba Networking Private 5G Core - versions 1.26.1.1 and prior
• HPE Aruba Networking EdgeConnect SD-WAN Gateways - multiple versions and platforms
• HPE Aruba Networking AOS-CX - multiple versions and platforms

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05083 rev.1 - Private 5G Core, Traefik StripPrefix Route-Level Auth Bypass via Path Normalization (CVE-2026-48020)
• HPESBNW05013 rev.1 - HPE Aruba Networking EdgeConnect SD-WAN Gateways, Multiple Vulnerabilities
• HPESBNW05081 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking AOS-CX
• HPE Security Bulletin Library

Between 2^nd and 3^rd June 2026, SolarWinds published security advisories to address vulnerabilities in the SolarWinds Serv-U - version 15.5.4 HF1 and prior.

Review the SolarWinds Security Vulnerabilities and apply the necessary updates.

On 21^st July 2026, Oracle published a security advisory to address vulnerabilities in multiple products. Included were critical updates for the following: 

• Oracle Database Server
• Oracle APEX
• Oracle Autonomous Health Framework
• Oracle Essbase
• Oracle Global Lifecycle Management
• Oracle GoldenGate
• Oracle NoSQL Database
• Oracle Spatial Studio
• Oracle SQL Developer
• Oracle TimesTen In-Memory Database
• Oracle Application Testing Suite
• Oracle Commerce
• Oracle Communications
• Oracle Construction and Engineering
• Oracle E-Business Suite
• Oracle Enterprise Manager
• Oracle Financial Services Applications
• Oracle Food and Beverage Applications
• Oracle Fusion Middleware
• Oracle Analytics
• Oracle HealthCare Applications
• Oracle Hospitality Applications
• Oracle Java SE
• Oracle JD Edwards
• Oracle MySQL
• Oracle PeopleSoft
• Oracle Retail Applications
• Oracle Siebel CRM
• Oracle Supply Chain
• Oracle Systems
• Oracle Utilities Applications
• Oracle Virtualization

Review Oracle Critical Patch Update Advisory - July 2026 and apply the necessary updates.

On 21^st July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.181/.182 (Windows/Mac), and 150.0.7871.181(Linux).

Review the Google security bulletins and apply the required updates.

On 21^st July 2026, Atlassian published security advisories to address vulnerabilities in the following products:

• Bamboo Data Center and Server - multiple versions
• Bitbucket Data Center and Server - multiple versions
• Confluence Data Center and Server - multiple versions
• Crowd Data Center and Server - multiple versions
• Fisheye/Crucible - versions 4.9.0 to 4.9.11
• Jira Data Center and Server - multiple versions
• Jira Service Management Data Center and Server - multiple versions
• Sourcetree for Mac - all versions from 3.4.11 to 3.4.12
• Sourcetree for Windows - all versions from 3.4.11 to 3.4.12

Review the following advisories and apply the necessary updates: 

• Security Bulletin - 21^st July 2026
• Atlassian Security Advisories and Bulletins

On 22^nd July 2026, ISC published security advisories to address vulnerabilities in the following products:

• ISC BIND 9 - versions 9.11.0 to 9.18.50
• ISC BIND 9 - versions 9.20.0 to 9.20.24
• ISC BIND 9 - versions 9.21.0 to 9.21.23
• BIND Supported Preview Edition - versions 9.11.3-S1 to 9.18.50-S1
• BIND Supported Preview Edition - versions 9.16.8-S1 to 9.18.50-S1
• BIND Supported Preview Edition - versions 9.18.11-S1 to 9.18.50-S1
• BIND Supported Preview Edition - versions 9.20.9-S1 to 9.20.24-S1

Review the BIND 9 Security Vulnerability Matrix and apply the necessary updates.

On 22^nd July 2026, n8n published security updates to address vulnerabilities in the following products:

• n8n - versions prior to 1.123.67
• n8n - versions prior to 2.32.1
• n8n - versions prior to 2.31.5

Review the following n8n Security Advisory and apply the necessary updates.

• Authenticated code execution in the n8n Git node
• n8n Security

On 22^nd July 2026, Veeam published security advisories to address vulnerabilities in the following products:

• MiCollab - multiple versions
• OpenScape UC - multiple versions

Review the following advisories and apply the necessary updates:

• Mitel Product Security Advisory MISA-2026-0006 - MiCollab Command Injection Vulnerability
• Mitel Product Security Advisory MISA-2026-0007 - OpenScape UC Cross Reflected Site Scripting (XSS) Vulnerability
• Mitel Security Bulletins

On 22^nd July 2026, Check Point published a security advisory to address vulnerabilities in the following products. Included was a critical update for the following :

• Security Management, Multi-Domain Management - multiple versions
• Firewall, Multi-Domain Management, Multi-Domain Log Server - multiple versions

Check Point is aware that CVE-2026-16232 is being exploited in the wild.

Review the provided web links and perform the suggested mitigations.

• Security Advisory - Action Required - July 2026 Security Update
• Check Point Security

On 21^st July 2026, Progress published a security update to address vulnerabilities in the following products.

• ShareFile Storage Zones Controller v5 - versions prior to 5.12.4
• ShareFile Storage Zones Controller v6 - versions prior to 6.0.1

Review the provided web links and apply the necessary updates.

• ShareFile Storage Zones Controller (SZC) Service Disruption Guidance, Login Issues, and Access Information
• Progress Trust Center

On 22^nd July 2026, Exim published security advisories to address vulnerabilities in Exim - version 4.88 to 4.99.4.

Review the following advisories and apply the necessary updates:

• Exim Security Advisory for EXIM-Security-2026-06-22.1 / GCVE-25-2026-07-45-1
• Exim Internet Mailer

On 22^nd July 2026, Drupal published security advisories to address vulnerabilities in Internationalization Single Sign-On - versions prior to 1.8.0.

Review the following Drupal Security Advisory and apply the necessary updates.

• Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081
• Drupal Security Advisories

On 20^th July 2026, Tenable published a security advisory to address vulnerabilities in Tenable Security Center - version 6.6.0 to 6.8.0.

Review the following Tenable Security Advisory and apply the necessary updates:

• [R1] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0: SC202607.1
• Tenable Product Security Advisories

On  21^st July 2026, Zyxel published security advisories to address vulnerabilities in the following products:

• DSL/Ethernet CPE - multiple versions and models
• Fiber ONTs - multiple versions and models
• Wireless Extenders - multiple versions and models

Review the following advisories and apply the necessary updates:

• Zyxel security advisory for post-authentication command injection vulnerability in certain DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders
• Zyxel Advisories

On 14^th July 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• Age of Empires II: Definitive Edition Game
• Azure Active Directory
• Azure CycleCloud 8.9.1
• Azure Monitor Agent Metrics Extension
• Azure Open AI
• Azure Spring Apps
• Azure Synapse
• Fabric Data Warehouse
• GitHub Copilot Plugin for JetBrains IDEs
• Microsoft .NET Framework
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 4.8.1
• Microsoft 365 Apps
• Microsoft 365 Apps for Enterprise
• Microsoft 365 Copilot
• Microsoft 365 Copilot for Android
• Microsoft 365 Copilot for iOS
• Microsoft Bing Search for iOS
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics NAV 2018
• Microsoft Edge (Chromium-based)
• Microsoft Entra Provisioning Service
• Microsoft Excel 2016
• Microsoft Exchange Online
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2019
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft Malware Protection Engine
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365 for Mac
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Office for Android
• Microsoft PC Manager
• Microsoft PowerPoint 2016
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Surface Go 2
• Microsoft Surface Go 3
• Microsoft Surface Hub
• Microsoft Surface Hub 2S
• Microsoft Surface Hub 3
• Microsoft Surface Laptop Go
• Microsoft Surface Laptop Go 2
• Microsoft Surface Laptop Go 3
• Microsoft Surface Pro 7+
• Microsoft Surface Pro 8
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Word 2016
• AspNet.OData
• AspNetCore.OData
• Minecraft Bedrock Dedicated Server
• Office Online Server
• Power BI Report Server
• Surface Laptop 4 with AMD Processor
• Surface Laptop 4 with Intel Processor
• Surface Windows Dev Kit
• Visual Studio Code
• Windows 10
• Windows 11
• Windows 11 Version
• Windows Admin Center
• Windows Remote Help
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025
• Windows Subsystem for Linux (WSL2)
• Windows Terminal for Windows 10
• Windows Terminal for Windows 11

Microsoft has indicated that CVE-2026-56164 and CVE-2026-56155 are being exploited.

On 14^th July 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-56164 and CVE-2026-56155 to their Known Exploited Vulnerabilities (KEV) Database.

On 16^th July  2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-58644 to their Known Exploited Vulnerabilities (KEV) Database.

Open-source reporting indicates that CVE-2026-50522 is being exploited in the wild.

Review the provided web links and apply the necessary updates.

• July 2026 Security Updates
• Security Update Guide
• CISA KEV: CVE-2026-56164
• CISA KEV: CVE-2026-56155
• CISA KEV: CVE-2026-58644

On 21^st July 2026, Mozilla published security advisories to address vulnerabilities in the following products:

• Firefox ESR - versions prior to 140.13
• Firefox ESR - versions prior to 115.38
• Firefox - versions prior to 153

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-70
• Mozilla Foundation Security Advisory 2026-69
• Mozilla Foundation Security Advisory 2026-68
• Mozilla Security Advisories

On 21^st July 2026, BDNCIRT issued an Advisory regarding GoldFactory / GoldPickaxe - Biometric-Stealing Mobile Banking Trojan Targeting e-KYC & Digital Identity Systems

Review the advisory GoldFactory / GoldPickaxe - Biometric-Stealing Mobile Banking Trojan Targeting e-KYC & Digital Identity Systems and take the necessary action.

Between 13^th and 19^th July 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• IBM API Connect V12 OnPrem - versions v12.1.0.0 to v12.1.1.0
• IBM Automation Decision Services - versions 24.0.0, 24.0.1 and 25.0.0
• IBM CICS Transaction Gateway Desktop Edition - versions prior to 10.1
• IBM CICS Transaction Gateway for Multiplatforms - versions prior to 10.1
• IBM Cloud Object Storage System - versions 3.20.0.0 to 3.20.1.66
• IBM Cloud Object Storage System - versions 3.8.1.54 to 3.19.5.56
• IBM Datacap Navigator - versions 9.1.7, 9.1.8 and 9.1.9
• IBM Datacap - versions 9.1.7, 9.1.8 and 9.1.9
• IBM Engineering AI Hub - versions 1.0.0, 1.1.0 and 1.2.0
• IBM Guardium Data Protection - version 12.1 and 12.2
• IBM Guardium Unified Discovery and Classification (GUDC) - versions 1.0.0 to 1.2.0
• IBM Installation Manager - versions prior to 1.10.1.4
• IBM Jazz Reporting Service - multiple versions
• IBM Packaging Utility - versions prior to 1.10.1.4
• IBM Process Automation Manager Open Edition Starter Kit for Banking - versions 9.3.1 to 9.4.1
• IBM QRadar Data Synchronization App - versions 1.0.0 to 3.3.0
• IBM QRadar User Behavior Analytics - versions 1.0.0 to 5.1.0
• IBM Rapid Network Automation - versions prior to 1.1.4 and 1.1.5
• IBM Sterling Secure Proxy - versions 6.1.0.0 to 6.1.0.4
• IBM Sterling Secure Proxy - versions 6.2.1.0 to 6.2.1.2 iFix01
• IBM Tivoli Netcool Configuration Manager - versions 6.4.2 GA to 6.4.2.24
• IBM WebSphere Service Registry and Repository - versions prior to 8.5
• IBM i - versions 7.6, 7.5, 7.4 and 7.3
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - versions 4.8.4 to 4.8.5
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - versions 5.0.0 to 5.3.3

Review the IBM Security Advisory and apply the necessary updates.

Between 13^th and 19^th July 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell DRAC9 - versions prior to 7.00.00.184
• Dell PowerEdge Server - multiple versions and models
• Dell PowerProtect Data Manager - versions prior to 20.2.0.0
• Dell SmartFabric Manager - versions prior to 2.2.1
• Dell Storage Monitoring and Reporting - versions prior to 6.1.1.0
• Dell Storage Resource Manager - versions prior to 6.1.1.0
• Dell ThinOS 10 - multiple versions and models
• Dell iDRAC9 - versions prior to 7.30.30.51

Review the provided Dell Security Advisory and apply the necessary updates.

Between 13^th  and 19^th July 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 14.04 LTS
• Ubuntu 16.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10

Review the Ubuntu Security Notices and apply the necessary updates.

On 13^th July 2026, ServiceNow published a security advisory to address a critical vulnerability in the following products:

• Brazil - versions prior to Brazil EA and Brazil GA
• Australia - versions prior to Australia Patch 2
• Zurich - versions prior to Zurich Patch 7b and Zurich Patch 9
• Yokohama - versions prior to Yokohama Patch 12 Hot Fix 1b and Yokohama Patch 13

Open-source reporting indicates that CVE-2026-6875 is being exploited in the wild.

Review the provided web links and apply the necessary updates.

• [Security Advisory] CVE-2026-6875 - Sandbox Escape in ServiceNow AI Platform
• ServiceNow security advisories

Between 13^th and 19^th July 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

On 16^th July 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitHub Enterprise Server - versions 3.21.x prior to 3.21.3
• GitHub Enterprise Server - versions 3.20.x prior to 3.20.5
• GitHub Enterprise Server - versions 3.19.x prior to 3.19.9
• GitHub Enterprise Server - versions 3.18.x prior to 3.18.12
• GitHub Enterprise Server - versions 3.17.x prior to 3.17.18

Review the following advisories and apply the necessary updates: 

• Enterprise Server 3.21.3
• Enterprise Server 3.20.5
• Enterprise Server 3.19.9
• Enterprise Server 3.18.12
• Enterprise Server 3.17.18

On 20^th July 2026, Zimbra published security advisories to address vulnerabilities in Zimbra Collaboration Suite (ZCS) Classic Web Client - versions prior to v10.1.20.

Review the following Zimbra Security Advisory and apply the necessary updates:

• Patch Release Update: Zimbra 10.1.20
• Zimbra Patch Release Updates

On 20^th July 2026, HPE published security advisories to address vulnerabilities in the HPE Telco Automated Assurance - version v1.4 and prior.

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05082 rev.1 - HPE Telco Automated Assurance, Multiple Vulnerabilities
• HPE Security Bulletin Library

On 17^th July 2026, WordPress published a security advisory to address vulnerabilities in the following product:

• WordPress 7.0 - versions prior to 7.0.2
• WordPress 6.9 - versions prior to 6.9.5
• WordPress 6.8 - versions prior to 6.8.6
• WordPress 7.1 beta - versions prior to 7.1 beta2

Open-source reporting indicates that CVE-2026-60137 and CVE-2026-63030 are being exploited in the wild.

Review the provided web links and apply the necessary updates.

• Facilitated SQL injection vulnerability in the `author__not_in` parameter of `WP_Query`
• REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
• WordPress 7.0.2 Release
• WordPress Releases

On 17^th July 2026, WordPress published a security advisory to address vulnerabilities in the following product:

• WordPress 7.0 - versions prior to 7.0.2
• WordPress 6.9 - versions prior to 6.9.5
• WordPress 6.8 - versions prior to 6.8.6
• WordPress 7.1 beta - versions prior to 7.1 beta2

Open-source reporting indicates that CVE-2026-60137 and CVE-2026-63030 are being exploited in the wild.

On 21^st July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-60137 and CVE-2026-63030 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• Facilitated SQL injection vulnerability in the `author__not_in` parameter of `WP_Query`
• REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
• WordPress 7.0.2 Release
• WordPress Releases
• CISA KEV: CVE-2026-60137
• CISA KEV: CVE-2026-63030

On 17^th July 2026, FreePBX published security advisories to address vulnerabilities in the following products:

• FreePBX Security-Reporting ucp (FreePBX 17) - versions prior to 17.0.9
• FreePBX Security-Reporting missedcall (FreePBX 16) - versions prior to 16.0.11
• FreePBX Security-Reporting missedcall (FreePBX 16) - versions prior to 17.0.6
• FreePBX Security-Reporting tts (FreePBX 17) - versions prior to 17.0.6
• FreePBX Security-Reporting tts (FreePBX 16) - versions prior to 16.0.6
• FreePBX Security-Reporting music (FreePBX 17) - versions prior to 17.0.7
• FreePBX Security-Reporting framework (FreePBX 16) - versions prior to 16.0.47
• FreePBX Security-Reporting framework (FreePBX 17) - versions prior to 17.0.30

• Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection
• Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
• Authenticated TTS AGI Command Injection Through TTS Name
• Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
• Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
• FreePBX Security Advisories

On 14^th July 2026, VMware published security advisories to address vulnerabilities in VMware Avi Load Balancer - multiple versions.

Review the following advisories and apply the necessary updates:

• VMSA-2026-0005: VMware Avi Load Balancer addresses multiple vulnerabilities (CVE-2026-47865, CVE-2026-47866, CVE-2026-47867, CVE-2026-47868, CVE-2026-47869, CVE-2026-47870, CVE-2026-47871)
• Security Advisories - Application Networking and Security

On 16^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.128/.129 (Windows/Mac), and 150.0.7871.128 (Linux).

Review the Google security bulletins and apply the required updates.

On 16^th July 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 150.0.4078.80.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 14^th July 2026, Zoom published a security advisory to address vulnerabilities in the following products:

• Remote Control for Zoom Contact Center for Windows - versions prior to 7.0.0
• Zoom Meeting SDK for Windows - versions prior to 6.6.11
• Zoom Rooms for Windows - versions prior to 7.1.0
• Zoom Workplace for Windows - versions prior to 7.0.5
• Zoom Workplace VDI Client for Windows - versions prior to 7.0.10, 6.5.18 and 6.6.15
• Zoom Workplace VDI Client for Windows - versions prior to 6.5.17 and 6.6.14

• Zoom Workplace for Windows - Improper Input Validation
• Zoom Rooms for Windows - Improper Privilege Management
• Zoom Workplace VDI Plugin for Windows - Improper Input Validation
• Zoom Clients for Windows - Race Condition
• Zoom Security Bulletins

On 14^th July 2026, Splunk published a security update to address vulnerabilities in the following products.

• Splunk Enterprise - multiple versions and platforms
• Splunk Cloud Platform - multiple versions and platforms

• SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise
• Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise
• Third-Party Package Updates in Splunk Enterprise - July 2026
• Splunk Security Advisories

On 14^th July 2026, JetBrains published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products:

• JetBrains TeamCity - versions prior to 2026.1.2
• JetBrains YouTrack - multiple versions
• JetBrains IntelliJ IDEA - versions prior to 2026.1.4 and 2026.2

On 14^th July 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• Age of Empires II: Definitive Edition Game
• Azure Active Directory
• Azure CycleCloud 8.9.1
• Azure Monitor Agent Metrics Extension
• Azure Open AI
• Azure Spring Apps
• Azure Synapse
• Fabric Data Warehouse
• GitHub Copilot Plugin for JetBrains IDEs
• Microsoft .NET Framework
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 4.8.1
• Microsoft 365 Apps
• Microsoft 365 Apps for Enterprise
• Microsoft 365 Copilot
• Microsoft 365 Copilot for Android
• Microsoft 365 Copilot for iOS
• Microsoft Bing Search for iOS
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics NAV 2018
• Microsoft Edge (Chromium-based)
• Microsoft Entra Provisioning Service
• Microsoft Excel 2016
• Microsoft Exchange Online
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2019
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft Malware Protection Engine
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365 for Mac
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Office for Android
• Microsoft PC Manager
• Microsoft PowerPoint 2016
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Surface Go 2
• Microsoft Surface Go 3
• Microsoft Surface Hub
• Microsoft Surface Hub 2S
• Microsoft Surface Hub 3
• Microsoft Surface Laptop Go
• Microsoft Surface Laptop Go 2
• Microsoft Surface Laptop Go 3
• Microsoft Surface Pro 7+
• Microsoft Surface Pro 8
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Word 2016
• AspNet.OData
• AspNetCore.OData
• Minecraft Bedrock Dedicated Server
• Office Online Server
• Power BI Report Server
• Surface Laptop 4 with AMD Processor
• Surface Laptop 4 with Intel Processor
• Surface Windows Dev Kit
• Visual Studio Code
• Windows 10
• Windows 11
• Windows 11 Version
• Windows Admin Center
• Windows Remote Help
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025
• Windows Subsystem for Linux (WSL2)
• Windows Terminal for Windows 10
• Windows Terminal for Windows 11

• July 2026 Security Updates
• Security Update Guide
• CISA KEV: CVE-2026-56164
• CISA KEV: CVE-2026-56155
• CISA KEV: CVE-2026-58644

On 9^th June 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• FortiSandbox 5.0 - versions 5.0.0 to 5.0.5
• FortiSandbox 4.4 - versions 4.4.0 to 4.4.8
• FortiSandbox Cloud 5.0 - versions 5.0.4 to 5.0.5
• FortiSandbox PaaS 5.0 - versions 5.0.4 through 5.0.5

• Second-Order OS Command Injection via JSON Input on start vnc feature
• Fortinet PSIRT Advisories
• CISA KEV: CVE-2026-25089

On 14^th April 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• FortiSandbox 4.4 - versions 4.4.0 to 4.4.8
• FortiSandbox 5.0 - versions 5.0.0 to 5.0.5
• FortiAnalyzer Cloud 7.6 - versions 7.6.2 to 7.6.4
• FortiManager Cloud 7.6 - versions 7.6.2 to 7.6.4
• FortiDDoS-F 7.2 - versions 7.2.1 to 7.2.2

• OS Command Injection through API endpoint
• Unauthenticated Authentication bypass and Privilege escalation in FortiSandbox
• Heap-based buffer overflow in oftpd daemon
• SQL Injection via API
• Fortinet PSIRT Advisories
• CISA KEV : CVE-2026-39808

On 14^th July 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Telco Intelligent Assurance (FAS and PDO) - versions 4.2.15 and prior
• HPE Unified OSS Console (UOC) - versions 3.1.21 and prior
• HPE Unified OSS Console Assurance Monitoring (UOCAM) - versions 3.1.21 and prior

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05076 rev.1 - HPE Telco Intelligent Assurance, Multiple Vulnerabilities
• HPESBNW05080 rev.1 - HPE Unified OSS Console (UOC) and HPE Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities
• HPE Security Bulletin Library

On 14^th July 2026, Citrix published security advisories to address vulnerabilities in the following products:

• Citrix Secure Access Client for Windows - versions prior to 26.6.1.20
• Citrix Endpoint Analysis Client for Windows - versions prior to 26.5.1.7

Review the following advisories and apply the necessary updates:

• Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows Security Bulletin for CVE-2026-53565 and CVE-2026-53566
• Citrix Security Advisories

On 14^th July 2026, Notepad++ released security updates to address Notepad++ - version prior to 9.7.

Review the provided web links and apply the necessary updates.

• Notepad++ v8.9.7 release
• Notepad++ community

On 15^th July 2026, F5 published Quarterly Security Notifications for multiple products. Included were updates for the following:

• NGINX Agent - versions 2.37.0 to 2.46.5
• NGINX Instance Manager - versions 2.17.1 to 2.22.1
• NGINX Plus - versions 37.0.0.1 to 37.0.2.1
• NGINX Plus - versions R33 to R36
• NGINX Open Source - multiple versions
• NGINX Instance Manager - versions 2.17.0 to 2.22.1
• F5 WAF for NGINX - versions 5.9.0 to 5.13.3
• NGINX App Protect WAF - versions 5.2.0 to 5.8.0
• NGINX App Protect WAF - versions 4.11.0 to 4.16.0
• NGINX Gateway Fabric - versions 2.0.0 to 2.6.6
• NGINX Gateway Fabric - versions 1.3.0 to 1.6.2
• NGINX Ingress Controller - multiple versions
• BIG-IP Next SPK - multiple versions
• BIG-IP Next CNF - multiple versions
• BIG-IP Next for Kubernetes - versions 2.0.0 to 2.3.1
• BIG-IP (all modules) - multiple versions

Review the following F5 Security Advisory and apply the necessary updates.

• K000161837: Out-of-band Security Notification (15^th July, 2026)
• MyF5

On 14^th July 2026, Tenable published a security advisory to address vulnerabilities in the following product:

• Nessus Agent - versions 11.2.0 and prior
• Nessus Agent - versions 11.1.3 and prior

Review the following Tenable Security Advisory and apply the necessary updates:

• [R1] Tenable Agent Versions 11.2.1 and 11.1.4 Fix a Path Traversal Vulnerability
• Tenable Product Security Advisories

On 28^th May 2026, Oracle published a security advisory to address critical vulnerabilities in the following products:

• Oracle Communications Unified Assurance - versions 6.1.1 to 7.0.0
• Oracle Database Server - versions 23.4.0 to 23.26.2
• Oracle E-Business Suite - versions 12.2.3 to 12.2.15
• Oracle Hospitality OPERA 5 Property Services - versions 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and 5.6.28
• Oracle REST Data Services - versions 24.2.0 to 26.1.0

Open-source reporting indicates that CVE-2026-46817 is being exploited.

On 15^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-46817 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and perform the suggested mitigations.

• Oracle Critical Security Patch Update Advisory - May 2026
• Oracle Critical Patch Updates, Security Alerts and Bulletins
• CISA KEV: CVE-2026-46817

On 15^th July 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Cisco RoomOS Release 11 and earlier On-Premises Operation - versions prior to 11.32.6.0
• Cisco RoomOS Release 11 and earlier Cloud-Aware Operation - versions prior to RoomOS 11.39.1.1
• Cisco RoomOS Release 26 On-Premises Operation - versions prior to 26.5.2.2
• Cisco RoomOS Release 26 Cloud-Aware Operation - versions prior to RoomOS June 2026 (26.7.1.7)

Review the following advisories and apply the necessary updates: 

• Cisco RoomOS Security Hardening Release: July 2026
• Cisco Security Advisories

On 14^th July 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• FortiAuthenticator 6.6 - versions 6.6.0 to 6.6.2
• FortiAuthenticator 6.5 - versions 6.5.0 to 6.5.7
• FortiSandbox 5.0 - versions 5.0.0 to 5.0.2
• FortiSandbox 4.4 - versions 4.4.3 to 4.4.8

Review the following advisories and apply the necessary updates:

• Out of bounds read in GUI
• Unauthenticated VNC access exposed on all interfaces
• Fortinet PSIRT Advisories

On 14^th July 2026, Ivanti published security advisories to address vulnerabilities in Ivanti Xtraction - version 2026.2 and prior.

Review the following advisories and apply the necessary updates:

• Security Advisory Ivanti Xtraction (CVE-2026-14902, CVE-2026-14903)
• Ivanti Security Advisories

On 14^th July 2026, Adobe published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• Adobe After Effects - version 25.6.5 and prior
• Adobe After Effects - version 26.2.1 and prior
• Adobe Animate 2023 - version 23.0.15 and prior
• Adobe Animate 2024 - version 24.0.13 and prior
• Adobe Audition - version 25.6.4 and prior
• Adobe Audition - version 26.0 and prior
• Adobe Bridge - version 15.1.5 (LTS) and prior
• Adobe Bridge - version 16.0.3 and prior
• Adobe Commerce B2B - multiple versions
• Adobe Commerce - multiple versions
• Adobe Commerce Events - version 1.6.0 to 1.20.0
• Adobe Experience Manager (AEM) - version AEM Cloud Service (CS) Release 2026.5.0 and prior
• Adobe Experience Manager (AEM) - version 6.5 LTS Service Pack 1 and prior
• Adobe Experience Manager (AEM) - version 6.5 Service Pack 24 and prior
• Adobe Media Encoder - version 25.6.5 and prior
• Adobe Media Encoder - version 26.2.2 and prior
• Adobe Premiere - version 26.2.2 and prior
• Adobe Premiere Pro - version 25.6.5 and prior
• ColdFusion 2025 Update 10 and earlier versions
• ColdFusion 2023 Update 21 and earlier versions
• ColdFusion 2021 - version 2021.0.0.323925 and prior
• ColdFusion 2023 - version 2023.0.0.330468 and prior
• ColdFusion 2025 - version 2023.0.0.331385 and prior
• Content Credentials Command-Line Tool - version c2patool-v0.17.0 and prior
• Content Credentials JS SDK - version @contentauth/c2pa-web@0.7.0 and prior
• Content Credentials Rust SDK - version c2pa-v0.84.0 and prior
• Creative Cloud Desktop Application - version 6.9.1.1 and prior
• Illustrator 2025 - version 29.8.7 and prior
• Illustrator 2026 - version 30.5 and prior
• Magento Open Source - multiple versions

Review the Adobe Security Advisories and apply the necessary updates.

On 14^th July 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• Age of Empires II: Definitive Edition Game
• Azure Active Directory
• Azure CycleCloud 8.9.1
• Azure Monitor Agent Metrics Extension
• Azure Open AI
• Azure Spring Apps
• Azure Synapse
• Fabric Data Warehouse
• GitHub Copilot Plugin for JetBrains IDEs
• Microsoft .NET Framework
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 4.8.1
• Microsoft 365 Apps
• Microsoft 365 Apps for Enterprise
• Microsoft 365 Copilot
• Microsoft 365 Copilot for Android
• Microsoft 365 Copilot for iOS
• Microsoft Bing Search for iOS
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics NAV 2018
• Microsoft Edge (Chromium-based)
• Microsoft Entra Provisioning Service
• Microsoft Excel 2016
• Microsoft Exchange Online
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2019
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft Malware Protection Engine
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365 for Mac
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Office for Android
• Microsoft PC Manager
• Microsoft PowerPoint 2016
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Surface Go 2
• Microsoft Surface Go 3
• Microsoft Surface Hub
• Microsoft Surface Hub 2S
• Microsoft Surface Hub 3
• Microsoft Surface Laptop Go
• Microsoft Surface Laptop Go 2
• Microsoft Surface Laptop Go 3
• Microsoft Surface Pro 7+
• Microsoft Surface Pro 8
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Word 2016
• AspNet.OData
• AspNetCore.OData
• Minecraft Bedrock Dedicated Server
• Office Online Server
• Power BI Report Server
• Surface Laptop 4 with AMD Processor
• Surface Laptop 4 with Intel Processor
• Surface Windows Dev Kit
• Visual Studio Code
• Windows 10
• Windows 11
• Windows 11 Version
• Windows Admin Center
• Windows Remote Help
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025
• Windows Subsystem for Linux (WSL2)
• Windows Terminal for Windows 10
• Windows Terminal for Windows 11

Microsoft has indicated that CVE-2026-56164 and CVE-2026-56155 are being exploited.

On 14^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-56164 and CVE-2026-56155 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• July 2026 Security Updates
• Security Update Guide
• CISA KEV: CVE-2026-56164
• CISA KEV: CVE-2026-56155

On 14^th July 2026, SonicWall published a security advisory to address critical vulnerabilities in the following products:

• SMA1000 Models (6210, 7210 & 8200v) - version 12.4.3-03245, 12.4.3-03387 and 12.4.3-03434 (platform-hotfix)
• SMA1000 Models (6210, 7210 & 8200v) - version 12.5.0-02283, 12.5.0-02624 and 12.5.0-02800 (platform-hotfix)

SonicWall indicates that CVE-2026-15409 and CVE-2026-15410 are being exploited.

On 14^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-15409 and CVE-2026-15410 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
• SonicWall Security Advisories
• CISA KEV: CVE-2026-15409
• CISA KEV: CVE-2026-15410

On 14^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.124/.125 (Windows/Mac), and 150.0.7871.124 (Linux).

Review the Google security bulletins and apply the required updates.

On 14^th July 2026, SAP published security advisories to address vulnerabilities in multiple products. Included were updates for the following:

• SAP Approuter node.js package - versions prior to 20.10.0
• SAP Approuter node.js package - versions prior to 21.2.0
• SAP Change and Transport System Attach Tool (ctsattach) - version CTS_UPLOAD_CLT 1
• SAP Commerce Cloud - versions HY_COM 2205, COM_CLOUD 2211 and 2211-JDK21
• SAP CRM (WebClient UI) - versions S4FND 104, 105 and 106
• SAP Fiori (launchpad) - versions SAP_UI 754, 755, 756, 757, 758 and 816
• SAP Integration Suite (Edge Integration Cell) - versions prior to 8.43.11
• SAP HANA Extended Application Services classic model (User Self Service) - version HDB 2.00
• SAP NetWeaver Application Server ABAP - versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, KERNEL 7.22, 7.53. 7.54, 7.77, 7.89, 7.93, 9.16, 9.18, 9.19 and 9.20
• SAP NetWeaver Application Server ABAP (applications based on Business Server Pages) - multiple versions
• SAP NetWeaver Application Server Java (Configuration Wizard) - version ENGINEAPI 7.50
• SAP NetWeaver Application Server Java (Web Container) - version LMCTC 7.50
• SAP NetWeaver AS Java - versions SERVERCORE 7.50, CORE-TOOLS 7.50 and J2EE-APPS 7.50
• SAP NetWeaver Enterprise Portal - version EP-RUNTIME 7.50
• SAProuter on Microsoft Windows - versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, SAP_ROUTER 7.53, 7.54, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 9.16, 9.17 and 9.18
• SAP S/4 HANA (Create Single Payment) - versions S4CORE 102, 103, 104, 105, 106, 107, 108 and 109
• SAP S/4HANA (Draft operation) - version S4CORE 108
• SAP S/4HANA Project Management (PPM-PRO) - multiple versions

Review the SAP Security Patch Day - July 2026 and apply the necessary updates.

On 14^th July 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Compute Scale-up Server 3200 - versions prior to v1.76.44
• HPE Compute Scale-up Server 3250 - versions prior to v1.02.48

Review the provided web link and apply the necessary updates, once available:

• HPESBHF05079 rev.1 - HPE Compute Scale-up Server 3200 and 3250 platforms, Multiple Vulnerabilities
• HPE Security Bulletin Library

On 14^th July 2026, Mozilla published security advisories to address vulnerabilities in Firefox - versions prior to 152.0.6.

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-67
• Mozilla Security Advisories

On 13^th July 2026, ServiceNow published security advisories to address vulnerabilities in the following products:

• Brazil - versions prior to Brazil EA and Brazil GA
• Australia - versions prior to Australia Patch 2
• Zurich - versions prior to Zurich Patch 7b and Zurich Patch 9
• Yokohama - versions prior to Yokohama Patch 12 Hot Fix 1b and Yokohama Patch 13

Review the provided web link and apply the necessary updates, once available:

• [Security Advisory] CVE-2026-6875 - Sandbox Escape in ServiceNow AI Platform
• ServiceNow security advisories

On 14^th July 2026, Veeam published security advisories to address vulnerabilities in the Veeam Software Appliance Updater Component - versions prior to 12.3.0.65.

Review the following advisories and apply the necessary updates:

• Veeam Software Appliance - Updater Component Vulnerability
• Veeam Knowledge Base

On 13^th July 2026, BDNCIRT issued an Advisory regarding Ghost Phishing: AES-GCM Encrypted Lures and EvilTokens Device-Code Phishing-as-a-Service Kit Targeting Microsoft 365 Accounts.

Review the Ghost Phishing: AES-GCM Encrypted Lures and EvilTokens Device-Code Phishing-as-a-Service Kit Targeting Microsoft 365 Accounts advisory and take the necessary action.

Between 6^th and 12^th July 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• IBM Aspera Enterprise WebApps - versions 1.0.0 to 1.0.3
• IBM Cloud Pak System - versions prior to 2.3.5.0
• IBM Cloud Pak for Data System (CPDS) - versions 1.0.0.0 to 1.0.10.0
• IBM Guardium Data Protection - versions prior to 12.2
• IBM Library Support for Spring - versions 3.2 to 3.2.26 and 3.4 to 3.4.18
• IBM Maximo Application Suite - Monitor Component – versions prior to 9.1 and 9.0
• IBM Operational Decision Manager - multiple versions
• IBM Planning Analytics Local - versions 2.1.0 to 2.1.21
• IBM RDi - version 9.9
• IBM SPSS Modeler - versions prior to 19.0.0.0
• IBM Software Support App (iOS) / (Android) - versions 4.0.1 to 4.1.0
• IBM Storage Protect Snapshot for Windows - versions 8.1.0.0 to 8.2.1.0
• IBM Tivoli Network Manager IP Edition - versions 4.2 GA to 4.2.0.24

Review the IBM Security Advisory and apply the necessary updates.

Between 6^th and 12^th July 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell Data Lakehouse - versions prior to 1.8.0.1
• Dell Enterprise SONiC Distribution - versions prior to 4.6.0

Review the following advisories and apply the necessary updates:

• DSA-2026-291: Security Update for Dell Data Lakehouse Third-Party Component Vulnerabilities
• DSA-2026-290: Security Update for Dell Enterprise SONiC Distribution Vulnerabilities
• Dell Security advisories and notices

Between 6^th  and 12^th July 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 18.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10
• Ubuntu 26.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 6^th and 12^th July 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

Between 8^th and 10^th July 2026, VMware published security advisories to address vulnerabilities in the following products:

• Open Source RabbitMQ - multiple versions
• VMware Tanzu Greenplum Command Center - multiple versions
• VMware Tanzu Greenplum Data Copy Utility - versions prior to 2.9.5
• VMware Tanzu Greenplum on Kubernetes - versions prior to 1.1.2
• VMware Tanzu Greenplum MCP Server - version prior to 1.0.2
• VMware Tanzu Greenplum Streaming Server - multiple versions
• VMware Tanzu Greenplum Text - versions prior to 4.0.2
• VMware Tanzu RabbitMQ - multiple versions
• VMware Tanzu RabbitMQ on Kubernetes - multiple versions
• VMware Tanzu RabbitMQ on Tanzu Platform - multiple versions

On 9^th July 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 150.0.4078.65.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 9^th July 2026, BDNCIRT issued an Advisory regarding AI-Branded Social Engineering, Phishing, and Malware Delivery Campaigns.

Review the Advisory AI-Branded Social Engineering, Phishing, and Malware Delivery Campaigns and take the necessary action.

On 8^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.114/115 (Windows/Mac), and 150.0.7871.114 (Linux).

Review the Google security bulletins and apply the required updates.

On 9^th July 2026, FreePBX published security advisories to address vulnerabilities in the following products:

• FreePBX API (FreePBX 17) - versions prior to 17.0.9
• FreePBX Backup (FreePBX 17) - versions prior to 17.0.11

• Authenticated API generatedocs Host Command Injection
• Authenticated Arbitrary SSH Key Injection via Backup Module
• FreePBX Security Advisories

On 3^rd February 2026, Django published a security advisory to address vulnerabilities in the following products:

• Django 4.2 - versions prior to 4.2.28
• Django 5.2 - versions prior to 5.2.11
• Django 6.0 - versions prior to 6.0.2

On 2^nd July 2026, Ubiquiti published security advisories to address vulnerabilities in the following products:

• EF-Core - version 5.1.18 and prior
• EFG - version 5.1.15 and prior
• ENVR - version 5.1.15 and prior
• ENVR-Core - version 5.1.15 and prior
• Express 7 - version 5.1.15 and prior
• UCG-Fiber - version 5.1.15 and prior
• UCG-Industrial - version 5.1.15 and prior
• UCG-Max - version 5.1.15 and prior
• UCG-Ultra - version 5.1.15 and prior
• UCK - version 5.1.15 and prior
• UCK-Enterprise - version 5.1.15 and prior
• UCKP - version 5.1.15 and prior
• UDM - version 5.1.15 and prior
• UDM-Beast - version 5.1.15 and prior
• UDM-Pro - version 5.1.15 and prior
• UDM-Pro - version 5.1.15 and prior
• UDM-Pro-Max - version 5.1.15 and prior
• UDM-SE - version 5.1.15 and prior
• UDR - version 5.1.15 and prior
• UDR-5G - version 5.1.15 and prior
• UDR7 - version 5.1.15 and prior
• UDW - version 5.1.15 and prior
• UNAS-2 - version 5.1.16 and prior
• UNAS-4 - version 5.1.16 and prior
• UNAS-Pro - version 5.1.16 and prior
• UNAS-Pro-4 - version 5.1.16 and prior
• UNAS-Pro-8 - version 5.1.16 and prior
• UniFi Access Application - version 4.2.28 and prior
• UniFi Network Application - version 10.3.58 and prior
• UniFi OS Server - version 5.1.15 and prior
• UniFi Protect Application - version 7.1.77 and prior
• UniFi Protect Floodlight - version 1.13.4 and prior
• UniFi Talk Application - version 5.1.2 and prior
• UNVR - version 5.1.15 and prior
• UNVR-G2 - version 5.1.15 and prior
• UNVR-G2-Pro - version 5.1.15 and prior
• UNVR-Instant - version 5.1.15 and prior
• UNVR-Pro - version 5.1.15 and prior

Review the Ubiquiti UniFi - Security Advisory Bulletin 066 and apply the necessary updates.

On 8^th July 2026, n8n published security updates to address vulnerabilities in the following products:

• n8n - versions prior to 1.123.64
• n8n - versions prior to 2.30.1
• n8n - versions prior to 2.29.8

Review the provided n8n Security and apply the necessary updates.

On 7^th July 2026, Tanium published security advisories to address vulnerabilities in the following products:

• Tanium Server 2025H1 Release - versions prior to Update MR21 (v7.7.3.8298)
• Tanium Server 2025H2 Release - versions prior to Update MR11 (v7.8.2.1198)
• Tanium Server 2026H1 Release - versions prior to Update MR3 (v7.8.4.1327)

Review the following advisories and apply the necessary updates:

• Tanium Security Advisories - TAN-2026-016
• Tanium Security Advisories

On 8^th July 2026, Palo Alto Networks published security advisories to address vulnerabilities in the following products:

• PAN-OS 12.1 - versions prior to 12.1.4-h8
• PAN-OS 12.1 - versions prior to 12.1.7-h2
• PAN-OS 12.1 - versions prior to 12.1.8
• PAN-OS 11.2 - versions prior to 11.2.4-h20
• PAN-OS 11.2 - versions prior to 11.2.7-h18
• PAN-OS 11.2 - versions prior to 11.2.10-h12
• PAN-OS 11.2 - versions prior to 11.2.13
• PAN-OS 11.1 - versions prior to 11.1.4-h35
• PAN-OS 11.1 - versions prior to 11.1.6-h35
• PAN-OS 11.1 - versions prior to 11.1.7.h8
• PAN-OS 11.1 - versions prior to 11.1.10-h30
• PAN-OS 11.1 - versions prior to 11.1.13-h9
• PAN-OS 11.1 - versions prior to 11.1.16
• PAN-OS 10.2 - versions prior to 10.2.7-h36
• PAN-OS 10.2 - versions prior to 10.2.10-h39
• PAN-OS 10.2 - versions prior to 10.2.13-h23
• PAN-OS 10.2 - versions prior to 10.2.16-h9
• PAN-OS 10.2 - versions prior to 10.2.18-h8
• Prisma Access 11.20.0 - versions prior to 11.2.7-h18
• Prisma Access 10.2.0 - versions prior to 10.2.10-h39
• Prisma Browser - versions prior to 149.10.3.53

Review the following advisories and apply the necessary updates:

• PAN-SA-2026-0010 Chromium: Monthly Vulnerability Update (July 2026)
• CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
• Palo Alto Network Security Advisories

On 8^th July 2026, Juniper Networks published a security advisory to address a critical vulnerability in the following products:

• Juniper cRPD - all versions
• Juniper CTPView - all versions
• Juniper Network Director - versions prior to 7.1R3
• Junos OS - multiple versions
• Junos OS Evolved - all versions
• Junos OS on MX Series with SPC3 and SRX Series - multiple versions
• Junos Space - all versions

Review the following Redis Security Advisory and apply the necessary updates:

• 2026-07 Security Bulletin: CTPView: Multiple vulnerabilities resolved in 9.3R2-3 Release
• 2026-07 Security Bulletin: Junos Space: Multiple vulnerabilities resolved in 26.1R1 Patch V1 Release
• 2026-07 Security Bulletin: Junos OS Evolved: URL handling vulnerability in libfetch results in heap buffer overflow (CVE-2020-7450)
• 2026-07 Security Bulletin: Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in a memory leak and eventual snmpd crash (CVE-2026-33799)
• Juniper Support Portal

On 8^th July 2026, Drupal published security advisories to address vulnerabilities in Location Selector - versions prior to 1.3.0.

Review the following Drupal Security Advisory and apply the necessary updates.

• Location Selector - Critical - SQL Injection - SA-CONTRIB-2026-072
• Drupal Security Advisories

On 8^th July 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) - versions prior to 19.1.2, 19.0.4 and 18.11.7
• GitLab Enterprise Edition (EE) - versions prior to 19.1.2, 19.0.4 and 18.11.7

Review the following advisories and apply the necessary updates: 

• GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7
• GitLab Releases

On 8^th July 2026, Progress published a security update to address vulnerabilities in the following products.

• MOVEit Transfer - version 2024.1.8 and prior
• MOVEit Transfer - version 2025.0.0 to 2025.0.7
• MOVEit Transfer - version 2025.1.0 to 2025.1.3
• MOVEit Transfer - version 2026.0.0

Review the provided web links and apply the necessary updates.

• MOVEit Transfer Critical Security Bulletin - June 2026 – (CVE-2026-10699, CVE-2026-10698, CVE-2026-11903)
• Progress Trust Center

On 7^th July 2026, BDNCIRT issued an Advisory regarding FortiBleed Campaign Exposes FortiGate Devices in Bangladesh with Credential Compromise.

Review the Advisory FortiBleed Campaign Exposes FortiGate Devices in Bangladesh with Credential Compromise and take the necessary action.

On 6^th July 2026, Android published a security bulletin to address vulnerabilities affecting Android devices.

Review the Android Security Bulletin and apply the necessary updates.

On 6^th July 2026, VMware published security advisories to address vulnerabilities in VMware Tanzu for MySQL on Kubernetes - versions prior to 2.0.4.

Review the following advisories and apply the necessary updates:

• Product Release Advisory - VMware Tanzu for MySQL on Kubernetes 2.0.4
• Security Advisories - VMware Cloud Foundation

On 7^th July 2026, Samsung published a security advisory to address vulnerabilities in Samsung mobile devices - versions prior to the SMR-JUL-2026 Release 1.

Review the Samsung Security Updates and apply the necessary updates.

On 7^th July 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Django 5.2 - versions prior to 5.2.16
• Django 6.0 - versions prior to 6.0.7

Review the Django Security Advisory and apply the necessary updates.

On 7^th July 2026, Zimbra published security advisories to address vulnerabilities in Zimbra Daffodil - versions prior to v10.1.17.

Review the following Zimbra Security Advisory and apply the necessary updates:

• Patch Release Update: Zimbra 10.1.19
• Zimbra Patch Release Updates

On 7^th July 2026, HPE published security advisories to address vulnerabilities in HPE Aruba Networking Private 5G Core - 1.26.1.0 and prior.

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05077 rev.1 - HPE Networking Private 5G Core, Multiple vulnerabilities
• HPE Security Bulletin Library

On 7^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.100/.101 (Windows/Mac), and 150.0.7871.100 (Linux).

Review the Google security bulletins and apply the required updates.

On 30^th June 2026, Adobe published security advisories to address critical vulnerabilities in the following products:

• Adobe ColdFusion 2025 - Update 9 and prior
• Adobe ColdFusion 2023 - Update 20 and prior
• Adobe Campaign Classic - version ACC v7: 7.4.3 build 9396 and prior

Open-source reporting indicates that CVE-2026-48282 is being exploited.

On 7^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-48282 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• Security update available for Adobe ColdFusion | APSB26-68
• Security updates available for Adobe Campaign Classic | APSB26-69
• Adobe Security Advisories
• CISA KEV: CVE-2026-48282

Between 29^th June and 5^th July 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

Between 29^th June and 5^th July 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 14.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10
• Ubuntu 26.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 29^th June and 5^th July 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell Cyber Recovery - versions prior to 20.1.0.0
• Dell Data Protection Advisor - versions 19.9 to 19.12 SP2
• Dell Networker - versions prior to 8.0.29
• Dell Networker - versions prior to 17.0.5
• Dell OpenManage Enterprise Modular - versions prior to 20.20.20
• Dell PowerProtect Cyber Recovery - versions prior to cyber-recovery-osupdate-15.4.0-18.bin
• Dell PowerProtect Data Manager Appliance DM5500 - versions prior to 5.20.1.0
• SupportAssist for Business PCs - versions prior to 5.1.1.3567
• SupportAssist for Home PCs - versions prior to 5.0.2.2900

Review the provided Dell Security Advisory and apply the necessary updates.

On 5^th July 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Roundcube Webmail - versions prior to 1.6.17
• Roundcube Webmail - versions prior to 1.7.2

Review the following advisories and apply the necessary updates:

• Security updates 1.6.17 and 1.7.2 released
• Roundcube Webmail 1.6.17
• Roundcube Webmail 1.7.2
• Roundcube Open Source Webmail Software

On 6^th July 2026, OpenSSH published a security advisory to address vulnerabilities in OpenSSH - versions prior to 10.4.

Review the following OpenSSH Security Advisory and apply the necessary updates:

• OpenSSH 10.4 Release Notes  
• OpenSSH

On 2^nd July 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 150.0.4078.48.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 21^st June 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Remote Support - version 25.3.2 and prior
• Privileged Remote Access - version 25.3.2 and prior

Review the following advisories and apply the necessary updates:

• BeyondTrust Security Advisory - Advisory ID: BT26-03
• BeyondTrust Advisories

On 21^st June 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Remote Support - version 25.3.2 and prior
• Privileged Remote Access - version 25.3.2 and prior

Review the following advisories and apply the necessary updates:

• BeyondTrust Security Advisory - Advisory ID: BT26-03
• BeyondTrust Advisories

Between 29^th June and 5^th July 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• Automation Assets in IBM Cloud Pak for Integration (CP4I) - multiple versions
• HMC V10.3.1050.0 - versions V10.3.1050.0 to V10.3.1064.0
• HMC V11.1.1110.0 - versions V11.1.1110.0 to V11.1.1111.5
• IBM Bob - versions 1.0.0, 1.0.1 and 1.0.2
• IBM App Connect Operator - multiple versions
• IBM App Connect Enterprise Certified Containers Operands - multiple versions
• IBM Business Automation Insights - multiple versions
• IBM Business Automation Manager Open Editions - versions 9.0.0 to 9.4.2
• IBM Business Automation Workflow traditional - multiple versions
• IBM Business Automation Workflow Enterprise Service Bus - multiple versions
• IBM Cloud Pak for Business Automation - multiple versions
• IBM DataPower Gateway - multiple models and versions
• IBM DataStax Enterprise - versions 6.9.0 to 6.9.22
• IBM Db2 Genius Hub – versions 1.1, 1.1.1 and 1.1.2
• IBM EntireX - version 11.1
• IBM Event Endpoint Management - versions 11.0.0 to 11.7.4
• IBM Integrated Analytics System - versions 1.0.0.0 to 1.0.30.0
• IBM Library Support for Spring - version 2.7
• IBM Quantum Safe Remediator - versions 1.1 to 1.1.2
• IBM Rational ClearQuest - versions 9.1 to 9.1.0.11 and 10.0 to 10.0.10
• IBM SPSS Modeler - version 19.0.0.0
• IBM Tivoli Monitoring - versions 6.3.0.7 to 6.3.0.7 Service Pack 22
• IBM Tivoli Netcool Configuration Impact - version 7.1.1
• IBM Tivoli Netcool Configuration Manager - versions 6.4.2 GA to 6.4.2.24
• IBM Tivoli System Automation Application Manager - version 4.1
• IBM webMethods Integration (on prem) - versions 10.15 and 10.11
• Langflow OSS - versions 1.0.0 to 1.10.0
• Maximo AI Service - version 9.1.0
• Platform Navigator in IBM Cloud Pak for Integration (CP4I) - multiple versions
• PowerVM Novalink - multiple versions
• WebSphere Application Server - versions 8.5 and 9.0

Review the IBM Security Advisory and apply the necessary updates.

On 5^th July 2026, BDNCIRT issued an Advisory regarding INC Ransomware Expands Cross-Platform Capabilities Targeting Enterprise and Mainframe Infrastructure Across the Asia-Pacific Region.

Review the Advisory INC Ransomware Expands Cross-Platform Capabilities Targeting Enterprise and Mainframe Infrastructure Across the Asia-Pacific Region and take the necessary action.

On 2^nd July 2026, WatchGuard published a security advisory to address vulnerabilities in the following products:

• Fireware OS 2025.1 - version 2026.2 and prior
• Fireware OS 11.x - version 11.12.4_Update1 and prior
• Fireware OS 12.0 - version 12.12 and prior
• Fireware OS 12.5 - version 12.5.18 and prior
• Mobile VPN with SSL client for Windows - version 2026.2 and prior

• WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication
• WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation
• WatchGuard Security Advisories

On 30^th June 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitHub Enterprise Server - versions 3.21.x prior to 3.21.2
• GitHub Enterprise Server - versions 3.20.x prior to 3.20.4
• GitHub Enterprise Server - versions 3.19.x prior to 3.19.8
• GitHub Enterprise Server - versions 3.18.x prior to 3.18.11
• GitHub Enterprise Server - versions 3.17.x prior to 3.17.17

Review the following advisories and apply the necessary updates: 

• Enterprise Server 3.21.2
• Enterprise Server 3.20.4
• Enterprise Server 3.19.8
• Enterprise Server 3.18.11
• Enterprise Server 3.17.17

On 1^st July 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Cisco Catalyst Center Release 2.3.7 - versions prior to 2.3.7.11-VA GSMU100
• Cisco Catalyst Center Release 3.1 - versions prior to 3.1.6 GSMU200
• Secure Endpoint Connector - multiple versions and platforms

• Cisco Catalyst Center Arbitrary File Read Vulnerability
• ClamAV Vulnerabilities Affecting Cisco Products: July 2026
• Cisco Security Advisories

On 30^th June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.46/47 (Windows/Mac), and 150.0.7871.46 (Linux).

Review the Google security bulletins and apply the required updates.

On 30^th June 2026, Adobe published security advisories to address critical vulnerabilities in the following products:

• Adobe ColdFusion 2025 - Update 9 and prior
• Adobe ColdFusion 2023 - Update 20 and prior
• Adobe Campaign Classic - version ACC v7: 7.4.3 build 9396 and prior

• Security update available for Adobe ColdFusion | APSB26-68
• Security updates available for Adobe Campaign Classic | APSB26-69
• Adobe Security Advisories

On 26th June 2026, SimpleHelp published a security update to address vulnerabilities in the following products:

• SimpleHelp - versions 5.5.0 to versions prior to 5.5.16
• SimpleHelp - versions 6.0 to versions prior to 6.0 RC2

Review the provided web links and apply the necessary updates.

• SimpleHelp 5.5 and 6.0 Security Fix
• SimpleHelp Release News
• CISA KEV: CVE-2026-48558

On 23rd June 2026, wolfSSL published a security update to address vulnerabilities in wolfSSL - versions prior to 5.9.2.

Review the provided web links and apply the necessary updates.

• wolfSSL Release 5.9.2 (23^rd 2026)
• wolfSSL

On 30^th June 2026, Mozilla published security advisories to address vulnerabilities in Firefox - versions prior to 152.04

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-62
• Mozilla Security Advisories

On 30^th June 2026, Citrix published security advisories to address vulnerabilities in the following products:

• NetScaler ADC and NetScaler Gateway - versions 14.1 before 14.1-72.61
• NetScaler ADC and NetScaler Gateway - versions 13.1 before 13.1-63.18
• NetScaler ADC FIPS - versions before 14.1-72.61 FIPS
• NetScaler ADC FIPS and NDcPP - versions before 13.1-37.272

Review the following advisories and apply the necessary updates:

• NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474
• Citrix Security Advisories

Between 22^nd and 28^th June 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 26.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 22^nd and 28^th June 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

Between 22^nd and 28^th June 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell PowerProtect Data Manager Appliance DM5510 - versions prior to 20.1.0.0
• Dell Networking OS10 - versions prior to 10.6.1.2
• Dell Private Cloud, Nutanix - versions prior to 01.02.00.00
• PowerSwitch Z9864F-ON - versions prior to 3.5.0
• Dell AX System for Azure - versions prior to 2606
• Dell OpenManage Enterprise Modular - versions prior to 2.20.20
• Dell iDRAC10 - versions prior to 1.30.10.51

Review the provided Dell Security Advisory and apply the necessary updates.

Between 22^nd and 28^th June 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• IBM Cloud Pak System - version 2.3.5.0
• IBM Observability with Instana (Agent) - versions Build 1.0.303 to 1.0.319
• IBM Db2 Big SQL on Cloud Pak for Data - version 5.0
• IBM Db2 Big SQL on IBM Software Hub - multiple versions
• IBM Engineering Workflow Management - version 7.2, 7.1 and 7.0.3
• IBM Engineering Requirements Management DOORS Next - version 7.2, 7.1 and 7.0.3
• Global Configuration Management - version 7.2, 7.1 and 7.0.3
• Jazz Foundation - version 7.2, 7.1 and 7.0.3
• Langflow OSS - version 1.0.0 to 1.10.0
• IBM Engineering Test Management - version 7.2, 7.1 and 7.0.3
• IBM InfoSphere Information Server - version 11.7.0.0 to 11.7.1.6
• IBM Operator for PostgreSQL - version v28.3.0 to v28.3.2
• IBM Spectrum Control - multiple versions
• IBM Sterling Partner Engagement Manager Essentials Edition - multiple versions
• IBM Sterling Partner Engagement Manager Standard Edition - multiple versions
• IBM Storage Defender Copy Data Management - version 2.2.0.0 to 2.3.0.1
• IBM Storage Protect Plus File Systems Agent - version 10.1.6 to 10.1.18
• IBM Storage Protect Plus Guest Applications - version 10.1.6 to 10.1.18
• IBM Storage Protect Plus vSnap - version 10.1 to 10.1.18
• IBM Storage Protect Plus Server - version 10.1 to 10.1.18
• IBM Storage Sentinel Anomaly Scan Engine - version 1.1.0 to 2.3.0
• IBM watsonx Orchestrate Developer Edition - version 1.4.0 to 2.11.0
• WatsonX BI - version 5.0 to 5.3
• WebSphere Service Registry and Repository - version 8.5

Review the IBM Security Advisory and apply the necessary updates.

On 26^th June 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 149.0.4022.98.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 29^th May 2026, Oracle published a security advisory to address critical vulnerabilities in the following products:

• Oracle Communications Unified Assurance - versions 6.1.1 to 7.0.0
• Oracle Database Server - versions 23.4.0 to 23.26.2
• Oracle E-Business Suite - versions 12.2.3 to 12.2.15
• Oracle Hospitality OPERA 5 Property Services - versions 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and 5.6.28
• Oracle REST Data Services - versions 24.2.0 to 26.1.0

Open-source reporting indicates that CVE-2026-46817 is being exploited.

Review the provided web links and perform the suggested mitigations.

• Oracle Critical Security Patch Update Advisory - May 2026
• Oracle Critical Patch Updates, Security Alerts and Bulletins

On 29^th June 2026, Apple published a security update to address vulnerabilities in the following products:

• iOS and iPadOS - versions prior to 26.5.2
• macOS Tahoe - versions prior to 26.5.2

Review the provided web links and apply the necessary updates.

• About the security content of iOS 26.5.2 and iPadOS 26.5.2
• About the security content of macOS Tahoe 26.5.2
• Apple security releases

On 25^th June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 149.0.7827.200/201 (Windows/Mac), and 149.0.7827.200 (Linux).

Review the Google security bulletins and apply the required updates.

On 24^th June 2026, Drupal published security advisories to address vulnerabilities in the following products:

• Geolocation Field - versions prior to 3.15.0
• WissKI - versions prior to 4.2.0