On 14^th July 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Telco Intelligent Assurance (FAS and PDO) - versions 4.2.15 and prior
• HPE Unified OSS Console (UOC) - versions 3.1.21 and prior
• HPE Unified OSS Console Assurance Monitoring (UOCAM) - versions 3.1.21 and prior

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05076 rev.1 - HPE Telco Intelligent Assurance, Multiple Vulnerabilities
• HPESBNW05080 rev.1 - HPE Unified OSS Console (UOC) and HPE Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities
• HPE Security Bulletin Library

On 14^th July 2026, Citrix published security advisories to address vulnerabilities in the following products:

• Citrix Secure Access Client for Windows - versions prior to 26.6.1.20
• Citrix Endpoint Analysis Client for Windows - versions prior to 26.5.1.7

Review the following advisories and apply the necessary updates:

• Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows Security Bulletin for CVE-2026-53565 and CVE-2026-53566
• Citrix Security Advisories

On 14^th July 2026, Notepad++ released security updates to address Notepad++ - version prior to 9.7.

Review the provided web links and apply the necessary updates.

• Notepad++ v8.9.7 release
• Notepad++ community

On 15^th July 2026, F5 published Quarterly Security Notifications for multiple products. Included were updates for the following:

• NGINX Agent - versions 2.37.0 to 2.46.5
• NGINX Instance Manager - versions 2.17.1 to 2.22.1
• NGINX Plus - versions 37.0.0.1 to 37.0.2.1
• NGINX Plus - versions R33 to R36
• NGINX Open Source - multiple versions
• NGINX Instance Manager - versions 2.17.0 to 2.22.1
• F5 WAF for NGINX - versions 5.9.0 to 5.13.3
• NGINX App Protect WAF - versions 5.2.0 to 5.8.0
• NGINX App Protect WAF - versions 4.11.0 to 4.16.0
• NGINX Gateway Fabric - versions 2.0.0 to 2.6.6
• NGINX Gateway Fabric - versions 1.3.0 to 1.6.2
• NGINX Ingress Controller - multiple versions
• BIG-IP Next SPK - multiple versions
• BIG-IP Next CNF - multiple versions
• BIG-IP Next for Kubernetes - versions 2.0.0 to 2.3.1
• BIG-IP (all modules) - multiple versions

Review the following F5 Security Advisory and apply the necessary updates.

• K000161837: Out-of-band Security Notification (15^th July, 2026)
• MyF5

On 14^th July 2026, Tenable published a security advisory to address vulnerabilities in the following product:

• Nessus Agent - versions 11.2.0 and prior
• Nessus Agent - versions 11.1.3 and prior

Review the following Tenable Security Advisory and apply the necessary updates:

• [R1] Tenable Agent Versions 11.2.1 and 11.1.4 Fix a Path Traversal Vulnerability
• Tenable Product Security Advisories

On 28^th May 2026, Oracle published a security advisory to address critical vulnerabilities in the following products:

• Oracle Communications Unified Assurance - versions 6.1.1 to 7.0.0
• Oracle Database Server - versions 23.4.0 to 23.26.2
• Oracle E-Business Suite - versions 12.2.3 to 12.2.15
• Oracle Hospitality OPERA 5 Property Services - versions 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and 5.6.28
• Oracle REST Data Services - versions 24.2.0 to 26.1.0

Open-source reporting indicates that CVE-2026-46817 is being exploited.

On 15^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-46817 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and perform the suggested mitigations.

• Oracle Critical Security Patch Update Advisory - May 2026
• Oracle Critical Patch Updates, Security Alerts and Bulletins
• CISA KEV: CVE-2026-46817

On 15^th July 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Cisco RoomOS Release 11 and earlier On-Premises Operation - versions prior to 11.32.6.0
• Cisco RoomOS Release 11 and earlier Cloud-Aware Operation - versions prior to RoomOS 11.39.1.1
• Cisco RoomOS Release 26 On-Premises Operation - versions prior to 26.5.2.2
• Cisco RoomOS Release 26 Cloud-Aware Operation - versions prior to RoomOS June 2026 (26.7.1.7)

Review the following advisories and apply the necessary updates: 

• Cisco RoomOS Security Hardening Release: July 2026
• Cisco Security Advisories

On 14^th July 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• FortiAuthenticator 6.6 - versions 6.6.0 to 6.6.2
• FortiAuthenticator 6.5 - versions 6.5.0 to 6.5.7
• FortiSandbox 5.0 - versions 5.0.0 to 5.0.2
• FortiSandbox 4.4 - versions 4.4.3 to 4.4.8

Review the following advisories and apply the necessary updates:

• Out of bounds read in GUI
• Unauthenticated VNC access exposed on all interfaces
• Fortinet PSIRT Advisories

On 14^th July 2026, Ivanti published security advisories to address vulnerabilities in Ivanti Xtraction - version 2026.2 and prior.

Review the following advisories and apply the necessary updates:

• Security Advisory Ivanti Xtraction (CVE-2026-14902, CVE-2026-14903)
• Ivanti Security Advisories

On 14^th July 2026, Adobe published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• Adobe After Effects - version 25.6.5 and prior
• Adobe After Effects - version 26.2.1 and prior
• Adobe Animate 2023 - version 23.0.15 and prior
• Adobe Animate 2024 - version 24.0.13 and prior
• Adobe Audition - version 25.6.4 and prior
• Adobe Audition - version 26.0 and prior
• Adobe Bridge - version 15.1.5 (LTS) and prior
• Adobe Bridge - version 16.0.3 and prior
• Adobe Commerce B2B - multiple versions
• Adobe Commerce - multiple versions
• Adobe Commerce Events - version 1.6.0 to 1.20.0
• Adobe Experience Manager (AEM) - version AEM Cloud Service (CS) Release 2026.5.0 and prior
• Adobe Experience Manager (AEM) - version 6.5 LTS Service Pack 1 and prior
• Adobe Experience Manager (AEM) - version 6.5 Service Pack 24 and prior
• Adobe Media Encoder - version 25.6.5 and prior
• Adobe Media Encoder - version 26.2.2 and prior
• Adobe Premiere - version 26.2.2 and prior
• Adobe Premiere Pro - version 25.6.5 and prior
• ColdFusion 2025 Update 10 and earlier versions
• ColdFusion 2023 Update 21 and earlier versions
• ColdFusion 2021 - version 2021.0.0.323925 and prior
• ColdFusion 2023 - version 2023.0.0.330468 and prior
• ColdFusion 2025 - version 2023.0.0.331385 and prior
• Content Credentials Command-Line Tool - version c2patool-v0.17.0 and prior
• Content Credentials JS SDK - version @contentauth/c2pa-web@0.7.0 and prior
• Content Credentials Rust SDK - version c2pa-v0.84.0 and prior
• Creative Cloud Desktop Application - version 6.9.1.1 and prior
• Illustrator 2025 - version 29.8.7 and prior
• Illustrator 2026 - version 30.5 and prior
• Magento Open Source - multiple versions

Review the Adobe Security Advisories and apply the necessary updates.

On 14^th July 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• Age of Empires II: Definitive Edition Game
• Azure Active Directory
• Azure CycleCloud 8.9.1
• Azure Monitor Agent Metrics Extension
• Azure Open AI
• Azure Spring Apps
• Azure Synapse
• Fabric Data Warehouse
• GitHub Copilot Plugin for JetBrains IDEs
• Microsoft .NET Framework
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 4.8.1
• Microsoft 365 Apps
• Microsoft 365 Apps for Enterprise
• Microsoft 365 Copilot
• Microsoft 365 Copilot for Android
• Microsoft 365 Copilot for iOS
• Microsoft Bing Search for iOS
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics NAV 2018
• Microsoft Edge (Chromium-based)
• Microsoft Entra Provisioning Service
• Microsoft Excel 2016
• Microsoft Exchange Online
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2019
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft Malware Protection Engine
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365 for Mac
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Office for Android
• Microsoft PC Manager
• Microsoft PowerPoint 2016
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Surface Go 2
• Microsoft Surface Go 3
• Microsoft Surface Hub
• Microsoft Surface Hub 2S
• Microsoft Surface Hub 3
• Microsoft Surface Laptop Go
• Microsoft Surface Laptop Go 2
• Microsoft Surface Laptop Go 3
• Microsoft Surface Pro 7+
• Microsoft Surface Pro 8
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Word 2016
• AspNet.OData
• AspNetCore.OData
• Minecraft Bedrock Dedicated Server
• Office Online Server
• Power BI Report Server
• Surface Laptop 4 with AMD Processor
• Surface Laptop 4 with Intel Processor
• Surface Windows Dev Kit
• Visual Studio Code
• Windows 10
• Windows 11
• Windows 11 Version
• Windows Admin Center
• Windows Remote Help
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025
• Windows Subsystem for Linux (WSL2)
• Windows Terminal for Windows 10
• Windows Terminal for Windows 11

Microsoft has indicated that CVE-2026-56164 and CVE-2026-56155 are being exploited.

On 14^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-56164 and CVE-2026-56155 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• July 2026 Security Updates
• Security Update Guide
• CISA KEV: CVE-2026-56164
• CISA KEV: CVE-2026-56155

On 14^th July 2026, SonicWall published a security advisory to address critical vulnerabilities in the following products:

• SMA1000 Models (6210, 7210 & 8200v) - version 12.4.3-03245, 12.4.3-03387 and 12.4.3-03434 (platform-hotfix)
• SMA1000 Models (6210, 7210 & 8200v) - version 12.5.0-02283, 12.5.0-02624 and 12.5.0-02800 (platform-hotfix)

SonicWall indicates that CVE-2026-15409 and CVE-2026-15410 are being exploited.

On 14^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-15409 and CVE-2026-15410 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
• SonicWall Security Advisories
• CISA KEV: CVE-2026-15409
• CISA KEV: CVE-2026-15410

On 14^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.124/.125 (Windows/Mac), and 150.0.7871.124 (Linux).

Review the Google security bulletins and apply the required updates.

On 14^th July 2026, SAP published security advisories to address vulnerabilities in multiple products. Included were updates for the following:

• SAP Approuter node.js package - versions prior to 20.10.0
• SAP Approuter node.js package - versions prior to 21.2.0
• SAP Change and Transport System Attach Tool (ctsattach) - version CTS_UPLOAD_CLT 1
• SAP Commerce Cloud - versions HY_COM 2205, COM_CLOUD 2211 and 2211-JDK21
• SAP CRM (WebClient UI) - versions S4FND 104, 105 and 106
• SAP Fiori (launchpad) - versions SAP_UI 754, 755, 756, 757, 758 and 816
• SAP Integration Suite (Edge Integration Cell) - versions prior to 8.43.11
• SAP HANA Extended Application Services classic model (User Self Service) - version HDB 2.00
• SAP NetWeaver Application Server ABAP - versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, KERNEL 7.22, 7.53. 7.54, 7.77, 7.89, 7.93, 9.16, 9.18, 9.19 and 9.20
• SAP NetWeaver Application Server ABAP (applications based on Business Server Pages) - multiple versions
• SAP NetWeaver Application Server Java (Configuration Wizard) - version ENGINEAPI 7.50
• SAP NetWeaver Application Server Java (Web Container) - version LMCTC 7.50
• SAP NetWeaver AS Java - versions SERVERCORE 7.50, CORE-TOOLS 7.50 and J2EE-APPS 7.50
• SAP NetWeaver Enterprise Portal - version EP-RUNTIME 7.50
• SAProuter on Microsoft Windows - versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, SAP_ROUTER 7.53, 7.54, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 9.16, 9.17 and 9.18
• SAP S/4 HANA (Create Single Payment) - versions S4CORE 102, 103, 104, 105, 106, 107, 108 and 109
• SAP S/4HANA (Draft operation) - version S4CORE 108
• SAP S/4HANA Project Management (PPM-PRO) - multiple versions

Review the SAP Security Patch Day - July 2026 and apply the necessary updates.

On 14^th July 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Compute Scale-up Server 3200 - versions prior to v1.76.44
• HPE Compute Scale-up Server 3250 - versions prior to v1.02.48

Review the provided web link and apply the necessary updates, once available:

• HPESBHF05079 rev.1 - HPE Compute Scale-up Server 3200 and 3250 platforms, Multiple Vulnerabilities
• HPE Security Bulletin Library

On 14^th July 2026, Mozilla published security advisories to address vulnerabilities in Firefox - versions prior to 152.0.6.

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-67
• Mozilla Security Advisories

On 13^th July 2026, ServiceNow published security advisories to address vulnerabilities in the following products:

• Brazil - versions prior to Brazil EA and Brazil GA
• Australia - versions prior to Australia Patch 2
• Zurich - versions prior to Zurich Patch 7b and Zurich Patch 9
• Yokohama - versions prior to Yokohama Patch 12 Hot Fix 1b and Yokohama Patch 13

Review the provided web link and apply the necessary updates, once available:

• [Security Advisory] CVE-2026-6875 - Sandbox Escape in ServiceNow AI Platform
• ServiceNow security advisories

On 14^th July 2026, Veeam published security advisories to address vulnerabilities in the Veeam Software Appliance Updater Component - versions prior to 12.3.0.65.

Review the following advisories and apply the necessary updates:

• Veeam Software Appliance - Updater Component Vulnerability
• Veeam Knowledge Base

On 13^th July 2026, BDNCIRT issued an Advisory regarding Ghost Phishing: AES-GCM Encrypted Lures and EvilTokens Device-Code Phishing-as-a-Service Kit Targeting Microsoft 365 Accounts.

Review the Ghost Phishing: AES-GCM Encrypted Lures and EvilTokens Device-Code Phishing-as-a-Service Kit Targeting Microsoft 365 Accounts advisory and take the necessary action.

Between 6^th and 12^th July 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• IBM Aspera Enterprise WebApps - versions 1.0.0 to 1.0.3
• IBM Cloud Pak System - versions prior to 2.3.5.0
• IBM Cloud Pak for Data System (CPDS) - versions 1.0.0.0 to 1.0.10.0
• IBM Guardium Data Protection - versions prior to 12.2
• IBM Library Support for Spring - versions 3.2 to 3.2.26 and 3.4 to 3.4.18
• IBM Maximo Application Suite - Monitor Component – versions prior to 9.1 and 9.0
• IBM Operational Decision Manager - multiple versions
• IBM Planning Analytics Local - versions 2.1.0 to 2.1.21
• IBM RDi - version 9.9
• IBM SPSS Modeler - versions prior to 19.0.0.0
• IBM Software Support App (iOS) / (Android) - versions 4.0.1 to 4.1.0
• IBM Storage Protect Snapshot for Windows - versions 8.1.0.0 to 8.2.1.0
• IBM Tivoli Network Manager IP Edition - versions 4.2 GA to 4.2.0.24

Review the IBM Security Advisory and apply the necessary updates.

Between 6^th and 12^th July 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell Data Lakehouse - versions prior to 1.8.0.1
• Dell Enterprise SONiC Distribution - versions prior to 4.6.0

Review the following advisories and apply the necessary updates:

• DSA-2026-291: Security Update for Dell Data Lakehouse Third-Party Component Vulnerabilities
• DSA-2026-290: Security Update for Dell Enterprise SONiC Distribution Vulnerabilities
• Dell Security advisories and notices

Between 6^th  and 12^th July 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 18.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10
• Ubuntu 26.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 6^th and 12^th July 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

Between 8^th and 10^th July 2026, VMware published security advisories to address vulnerabilities in the following products:

• Open Source RabbitMQ - multiple versions
• VMware Tanzu Greenplum Command Center - multiple versions
• VMware Tanzu Greenplum Data Copy Utility - versions prior to 2.9.5
• VMware Tanzu Greenplum on Kubernetes - versions prior to 1.1.2
• VMware Tanzu Greenplum MCP Server - version prior to 1.0.2
• VMware Tanzu Greenplum Streaming Server - multiple versions
• VMware Tanzu Greenplum Text - versions prior to 4.0.2
• VMware Tanzu RabbitMQ - multiple versions
• VMware Tanzu RabbitMQ on Kubernetes - multiple versions
• VMware Tanzu RabbitMQ on Tanzu Platform - multiple versions

On 9^th July 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 150.0.4078.65.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 9^th July 2026, BDNCIRT issued an Advisory regarding AI-Branded Social Engineering, Phishing, and Malware Delivery Campaigns.

Review the Advisory AI-Branded Social Engineering, Phishing, and Malware Delivery Campaigns and take the necessary action.

On 8^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.114/115 (Windows/Mac), and 150.0.7871.114 (Linux).

Review the Google security bulletins and apply the required updates.

On 9^th July 2026, FreePBX published security advisories to address vulnerabilities in the following products:

• FreePBX API (FreePBX 17) - versions prior to 17.0.9
• FreePBX Backup (FreePBX 17) - versions prior to 17.0.11

• Authenticated API generatedocs Host Command Injection
• Authenticated Arbitrary SSH Key Injection via Backup Module
• FreePBX Security Advisories

On 3^rd February 2026, Django published a security advisory to address vulnerabilities in the following products:

• Django 4.2 - versions prior to 4.2.28
• Django 5.2 - versions prior to 5.2.11
• Django 6.0 - versions prior to 6.0.2

On 2^nd July 2026, Ubiquiti published security advisories to address vulnerabilities in the following products:

• EF-Core - version 5.1.18 and prior
• EFG - version 5.1.15 and prior
• ENVR - version 5.1.15 and prior
• ENVR-Core - version 5.1.15 and prior
• Express 7 - version 5.1.15 and prior
• UCG-Fiber - version 5.1.15 and prior
• UCG-Industrial - version 5.1.15 and prior
• UCG-Max - version 5.1.15 and prior
• UCG-Ultra - version 5.1.15 and prior
• UCK - version 5.1.15 and prior
• UCK-Enterprise - version 5.1.15 and prior
• UCKP - version 5.1.15 and prior
• UDM - version 5.1.15 and prior
• UDM-Beast - version 5.1.15 and prior
• UDM-Pro - version 5.1.15 and prior
• UDM-Pro - version 5.1.15 and prior
• UDM-Pro-Max - version 5.1.15 and prior
• UDM-SE - version 5.1.15 and prior
• UDR - version 5.1.15 and prior
• UDR-5G - version 5.1.15 and prior
• UDR7 - version 5.1.15 and prior
• UDW - version 5.1.15 and prior
• UNAS-2 - version 5.1.16 and prior
• UNAS-4 - version 5.1.16 and prior
• UNAS-Pro - version 5.1.16 and prior
• UNAS-Pro-4 - version 5.1.16 and prior
• UNAS-Pro-8 - version 5.1.16 and prior
• UniFi Access Application - version 4.2.28 and prior
• UniFi Network Application - version 10.3.58 and prior
• UniFi OS Server - version 5.1.15 and prior
• UniFi Protect Application - version 7.1.77 and prior
• UniFi Protect Floodlight - version 1.13.4 and prior
• UniFi Talk Application - version 5.1.2 and prior
• UNVR - version 5.1.15 and prior
• UNVR-G2 - version 5.1.15 and prior
• UNVR-G2-Pro - version 5.1.15 and prior
• UNVR-Instant - version 5.1.15 and prior
• UNVR-Pro - version 5.1.15 and prior

Review the Ubiquiti UniFi - Security Advisory Bulletin 066 and apply the necessary updates.

On 8^th July 2026, n8n published security updates to address vulnerabilities in the following products:

• n8n - versions prior to 1.123.64
• n8n - versions prior to 2.30.1
• n8n - versions prior to 2.29.8

Review the provided n8n Security and apply the necessary updates.

On 7^th July 2026, Tanium published security advisories to address vulnerabilities in the following products:

• Tanium Server 2025H1 Release - versions prior to Update MR21 (v7.7.3.8298)
• Tanium Server 2025H2 Release - versions prior to Update MR11 (v7.8.2.1198)
• Tanium Server 2026H1 Release - versions prior to Update MR3 (v7.8.4.1327)

Review the following advisories and apply the necessary updates:

• Tanium Security Advisories - TAN-2026-016
• Tanium Security Advisories

On 8^th July 2026, Palo Alto Networks published security advisories to address vulnerabilities in the following products:

• PAN-OS 12.1 - versions prior to 12.1.4-h8
• PAN-OS 12.1 - versions prior to 12.1.7-h2
• PAN-OS 12.1 - versions prior to 12.1.8
• PAN-OS 11.2 - versions prior to 11.2.4-h20
• PAN-OS 11.2 - versions prior to 11.2.7-h18
• PAN-OS 11.2 - versions prior to 11.2.10-h12
• PAN-OS 11.2 - versions prior to 11.2.13
• PAN-OS 11.1 - versions prior to 11.1.4-h35
• PAN-OS 11.1 - versions prior to 11.1.6-h35
• PAN-OS 11.1 - versions prior to 11.1.7.h8
• PAN-OS 11.1 - versions prior to 11.1.10-h30
• PAN-OS 11.1 - versions prior to 11.1.13-h9
• PAN-OS 11.1 - versions prior to 11.1.16
• PAN-OS 10.2 - versions prior to 10.2.7-h36
• PAN-OS 10.2 - versions prior to 10.2.10-h39
• PAN-OS 10.2 - versions prior to 10.2.13-h23
• PAN-OS 10.2 - versions prior to 10.2.16-h9
• PAN-OS 10.2 - versions prior to 10.2.18-h8
• Prisma Access 11.20.0 - versions prior to 11.2.7-h18
• Prisma Access 10.2.0 - versions prior to 10.2.10-h39
• Prisma Browser - versions prior to 149.10.3.53

Review the following advisories and apply the necessary updates:

• PAN-SA-2026-0010 Chromium: Monthly Vulnerability Update (July 2026)
• CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
• Palo Alto Network Security Advisories

On 8^th July 2026, Juniper Networks published a security advisory to address a critical vulnerability in the following products:

• Juniper cRPD - all versions
• Juniper CTPView - all versions
• Juniper Network Director - versions prior to 7.1R3
• Junos OS - multiple versions
• Junos OS Evolved - all versions
• Junos OS on MX Series with SPC3 and SRX Series - multiple versions
• Junos Space - all versions

Review the following Redis Security Advisory and apply the necessary updates:

• 2026-07 Security Bulletin: CTPView: Multiple vulnerabilities resolved in 9.3R2-3 Release
• 2026-07 Security Bulletin: Junos Space: Multiple vulnerabilities resolved in 26.1R1 Patch V1 Release
• 2026-07 Security Bulletin: Junos OS Evolved: URL handling vulnerability in libfetch results in heap buffer overflow (CVE-2020-7450)
• 2026-07 Security Bulletin: Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in a memory leak and eventual snmpd crash (CVE-2026-33799)
• Juniper Support Portal

On 8^th July 2026, Drupal published security advisories to address vulnerabilities in Location Selector - versions prior to 1.3.0.

Review the following Drupal Security Advisory and apply the necessary updates.

• Location Selector - Critical - SQL Injection - SA-CONTRIB-2026-072
• Drupal Security Advisories

On 8^th July 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) - versions prior to 19.1.2, 19.0.4 and 18.11.7
• GitLab Enterprise Edition (EE) - versions prior to 19.1.2, 19.0.4 and 18.11.7

Review the following advisories and apply the necessary updates: 

• GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7
• GitLab Releases

On 8^th July 2026, Progress published a security update to address vulnerabilities in the following products.

• MOVEit Transfer - version 2024.1.8 and prior
• MOVEit Transfer - version 2025.0.0 to 2025.0.7
• MOVEit Transfer - version 2025.1.0 to 2025.1.3
• MOVEit Transfer - version 2026.0.0

Review the provided web links and apply the necessary updates.

• MOVEit Transfer Critical Security Bulletin - June 2026 – (CVE-2026-10699, CVE-2026-10698, CVE-2026-11903)
• Progress Trust Center

On 7^th July 2026, BDNCIRT issued an Advisory regarding FortiBleed Campaign Exposes FortiGate Devices in Bangladesh with Credential Compromise.

Review the Advisory FortiBleed Campaign Exposes FortiGate Devices in Bangladesh with Credential Compromise and take the necessary action.

On 6^th July 2026, Android published a security bulletin to address vulnerabilities affecting Android devices.

Review the Android Security Bulletin and apply the necessary updates.

On 6^th July 2026, VMware published security advisories to address vulnerabilities in VMware Tanzu for MySQL on Kubernetes - versions prior to 2.0.4.

Review the following advisories and apply the necessary updates:

• Product Release Advisory - VMware Tanzu for MySQL on Kubernetes 2.0.4
• Security Advisories - VMware Cloud Foundation

On 7^th July 2026, Samsung published a security advisory to address vulnerabilities in Samsung mobile devices - versions prior to the SMR-JUL-2026 Release 1.

Review the Samsung Security Updates and apply the necessary updates.

On 7^th July 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Django 5.2 - versions prior to 5.2.16
• Django 6.0 - versions prior to 6.0.7

Review the Django Security Advisory and apply the necessary updates.

On 7^th July 2026, Zimbra published security advisories to address vulnerabilities in Zimbra Daffodil - versions prior to v10.1.17.

Review the following Zimbra Security Advisory and apply the necessary updates:

• Patch Release Update: Zimbra 10.1.19
• Zimbra Patch Release Updates

On 7^th July 2026, HPE published security advisories to address vulnerabilities in HPE Aruba Networking Private 5G Core - 1.26.1.0 and prior.

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05077 rev.1 - HPE Networking Private 5G Core, Multiple vulnerabilities
• HPE Security Bulletin Library

On 7^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.100/.101 (Windows/Mac), and 150.0.7871.100 (Linux).

Review the Google security bulletins and apply the required updates.

On 30^th June 2026, Adobe published security advisories to address critical vulnerabilities in the following products:

• Adobe ColdFusion 2025 - Update 9 and prior
• Adobe ColdFusion 2023 - Update 20 and prior
• Adobe Campaign Classic - version ACC v7: 7.4.3 build 9396 and prior

Open-source reporting indicates that CVE-2026-48282 is being exploited.

On 7^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-48282 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• Security update available for Adobe ColdFusion | APSB26-68
• Security updates available for Adobe Campaign Classic | APSB26-69
• Adobe Security Advisories
• CISA KEV: CVE-2026-48282

Between 29^th June and 5^th July 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

Between 29^th June and 5^th July 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 14.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10
• Ubuntu 26.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 29^th June and 5^th July 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell Cyber Recovery - versions prior to 20.1.0.0
• Dell Data Protection Advisor - versions 19.9 to 19.12 SP2
• Dell Networker - versions prior to 8.0.29
• Dell Networker - versions prior to 17.0.5
• Dell OpenManage Enterprise Modular - versions prior to 20.20.20
• Dell PowerProtect Cyber Recovery - versions prior to cyber-recovery-osupdate-15.4.0-18.bin
• Dell PowerProtect Data Manager Appliance DM5500 - versions prior to 5.20.1.0
• SupportAssist for Business PCs - versions prior to 5.1.1.3567
• SupportAssist for Home PCs - versions prior to 5.0.2.2900

Review the provided Dell Security Advisory and apply the necessary updates.

On 5^th July 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Roundcube Webmail - versions prior to 1.6.17
• Roundcube Webmail - versions prior to 1.7.2

Review the following advisories and apply the necessary updates:

• Security updates 1.6.17 and 1.7.2 released
• Roundcube Webmail 1.6.17
• Roundcube Webmail 1.7.2
• Roundcube Open Source Webmail Software

On 6^th July 2026, OpenSSH published a security advisory to address vulnerabilities in OpenSSH - versions prior to 10.4.

Review the following OpenSSH Security Advisory and apply the necessary updates:

• OpenSSH 10.4 Release Notes  
• OpenSSH

On 2^nd July 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 150.0.4078.48.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 21^st June 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Remote Support - version 25.3.2 and prior
• Privileged Remote Access - version 25.3.2 and prior

Review the following advisories and apply the necessary updates:

• BeyondTrust Security Advisory - Advisory ID: BT26-03
• BeyondTrust Advisories

On 21^st June 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Remote Support - version 25.3.2 and prior
• Privileged Remote Access - version 25.3.2 and prior

Review the following advisories and apply the necessary updates:

• BeyondTrust Security Advisory - Advisory ID: BT26-03
• BeyondTrust Advisories

Between 29^th June and 5^th July 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• Automation Assets in IBM Cloud Pak for Integration (CP4I) - multiple versions
• HMC V10.3.1050.0 - versions V10.3.1050.0 to V10.3.1064.0
• HMC V11.1.1110.0 - versions V11.1.1110.0 to V11.1.1111.5
• IBM Bob - versions 1.0.0, 1.0.1 and 1.0.2
• IBM App Connect Operator - multiple versions
• IBM App Connect Enterprise Certified Containers Operands - multiple versions
• IBM Business Automation Insights - multiple versions
• IBM Business Automation Manager Open Editions - versions 9.0.0 to 9.4.2
• IBM Business Automation Workflow traditional - multiple versions
• IBM Business Automation Workflow Enterprise Service Bus - multiple versions
• IBM Cloud Pak for Business Automation - multiple versions
• IBM DataPower Gateway - multiple models and versions
• IBM DataStax Enterprise - versions 6.9.0 to 6.9.22
• IBM Db2 Genius Hub – versions 1.1, 1.1.1 and 1.1.2
• IBM EntireX - version 11.1
• IBM Event Endpoint Management - versions 11.0.0 to 11.7.4
• IBM Integrated Analytics System - versions 1.0.0.0 to 1.0.30.0
• IBM Library Support for Spring - version 2.7
• IBM Quantum Safe Remediator - versions 1.1 to 1.1.2
• IBM Rational ClearQuest - versions 9.1 to 9.1.0.11 and 10.0 to 10.0.10
• IBM SPSS Modeler - version 19.0.0.0
• IBM Tivoli Monitoring - versions 6.3.0.7 to 6.3.0.7 Service Pack 22
• IBM Tivoli Netcool Configuration Impact - version 7.1.1
• IBM Tivoli Netcool Configuration Manager - versions 6.4.2 GA to 6.4.2.24
• IBM Tivoli System Automation Application Manager - version 4.1
• IBM webMethods Integration (on prem) - versions 10.15 and 10.11
• Langflow OSS - versions 1.0.0 to 1.10.0
• Maximo AI Service - version 9.1.0
• Platform Navigator in IBM Cloud Pak for Integration (CP4I) - multiple versions
• PowerVM Novalink - multiple versions
• WebSphere Application Server - versions 8.5 and 9.0

Review the IBM Security Advisory and apply the necessary updates.

On 5^th July 2026, BDNCIRT issued an Advisory regarding INC Ransomware Expands Cross-Platform Capabilities Targeting Enterprise and Mainframe Infrastructure Across the Asia-Pacific Region.

Review the Advisory INC Ransomware Expands Cross-Platform Capabilities Targeting Enterprise and Mainframe Infrastructure Across the Asia-Pacific Region and take the necessary action.

On 2^nd July 2026, WatchGuard published a security advisory to address vulnerabilities in the following products:

• Fireware OS 2025.1 - version 2026.2 and prior
• Fireware OS 11.x - version 11.12.4_Update1 and prior
• Fireware OS 12.0 - version 12.12 and prior
• Fireware OS 12.5 - version 12.5.18 and prior
• Mobile VPN with SSL client for Windows - version 2026.2 and prior

• WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication
• WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation
• WatchGuard Security Advisories

On 30^th June 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitHub Enterprise Server - versions 3.21.x prior to 3.21.2
• GitHub Enterprise Server - versions 3.20.x prior to 3.20.4
• GitHub Enterprise Server - versions 3.19.x prior to 3.19.8
• GitHub Enterprise Server - versions 3.18.x prior to 3.18.11
• GitHub Enterprise Server - versions 3.17.x prior to 3.17.17

Review the following advisories and apply the necessary updates: 

• Enterprise Server 3.21.2
• Enterprise Server 3.20.4
• Enterprise Server 3.19.8
• Enterprise Server 3.18.11
• Enterprise Server 3.17.17

On 1^st July 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Cisco Catalyst Center Release 2.3.7 - versions prior to 2.3.7.11-VA GSMU100
• Cisco Catalyst Center Release 3.1 - versions prior to 3.1.6 GSMU200
• Secure Endpoint Connector - multiple versions and platforms

• Cisco Catalyst Center Arbitrary File Read Vulnerability
• ClamAV Vulnerabilities Affecting Cisco Products: July 2026
• Cisco Security Advisories

On 30^th June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.46/47 (Windows/Mac), and 150.0.7871.46 (Linux).

Review the Google security bulletins and apply the required updates.

On 30^th June 2026, Adobe published security advisories to address critical vulnerabilities in the following products:

• Adobe ColdFusion 2025 - Update 9 and prior
• Adobe ColdFusion 2023 - Update 20 and prior
• Adobe Campaign Classic - version ACC v7: 7.4.3 build 9396 and prior

• Security update available for Adobe ColdFusion | APSB26-68
• Security updates available for Adobe Campaign Classic | APSB26-69
• Adobe Security Advisories

On 26th June 2026, SimpleHelp published a security update to address vulnerabilities in the following products:

• SimpleHelp - versions 5.5.0 to versions prior to 5.5.16
• SimpleHelp - versions 6.0 to versions prior to 6.0 RC2

Review the provided web links and apply the necessary updates.

• SimpleHelp 5.5 and 6.0 Security Fix
• SimpleHelp Release News
• CISA KEV: CVE-2026-48558

On 23rd June 2026, wolfSSL published a security update to address vulnerabilities in wolfSSL - versions prior to 5.9.2.

Review the provided web links and apply the necessary updates.

• wolfSSL Release 5.9.2 (23^rd 2026)
• wolfSSL

On 30^th June 2026, Mozilla published security advisories to address vulnerabilities in Firefox - versions prior to 152.04

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-62
• Mozilla Security Advisories

On 30^th June 2026, Citrix published security advisories to address vulnerabilities in the following products:

• NetScaler ADC and NetScaler Gateway - versions 14.1 before 14.1-72.61
• NetScaler ADC and NetScaler Gateway - versions 13.1 before 13.1-63.18
• NetScaler ADC FIPS - versions before 14.1-72.61 FIPS
• NetScaler ADC FIPS and NDcPP - versions before 13.1-37.272

Review the following advisories and apply the necessary updates:

• NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474
• Citrix Security Advisories

Between 22^nd and 28^th June 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 26.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 22^nd and 28^th June 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

Between 22^nd and 28^th June 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell PowerProtect Data Manager Appliance DM5510 - versions prior to 20.1.0.0
• Dell Networking OS10 - versions prior to 10.6.1.2
• Dell Private Cloud, Nutanix - versions prior to 01.02.00.00
• PowerSwitch Z9864F-ON - versions prior to 3.5.0
• Dell AX System for Azure - versions prior to 2606
• Dell OpenManage Enterprise Modular - versions prior to 2.20.20
• Dell iDRAC10 - versions prior to 1.30.10.51

Review the provided Dell Security Advisory and apply the necessary updates.

Between 22^nd and 28^th June 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• IBM Cloud Pak System - version 2.3.5.0
• IBM Observability with Instana (Agent) - versions Build 1.0.303 to 1.0.319
• IBM Db2 Big SQL on Cloud Pak for Data - version 5.0
• IBM Db2 Big SQL on IBM Software Hub - multiple versions
• IBM Engineering Workflow Management - version 7.2, 7.1 and 7.0.3
• IBM Engineering Requirements Management DOORS Next - version 7.2, 7.1 and 7.0.3
• Global Configuration Management - version 7.2, 7.1 and 7.0.3
• Jazz Foundation - version 7.2, 7.1 and 7.0.3
• Langflow OSS - version 1.0.0 to 1.10.0
• IBM Engineering Test Management - version 7.2, 7.1 and 7.0.3
• IBM InfoSphere Information Server - version 11.7.0.0 to 11.7.1.6
• IBM Operator for PostgreSQL - version v28.3.0 to v28.3.2
• IBM Spectrum Control - multiple versions
• IBM Sterling Partner Engagement Manager Essentials Edition - multiple versions
• IBM Sterling Partner Engagement Manager Standard Edition - multiple versions
• IBM Storage Defender Copy Data Management - version 2.2.0.0 to 2.3.0.1
• IBM Storage Protect Plus File Systems Agent - version 10.1.6 to 10.1.18
• IBM Storage Protect Plus Guest Applications - version 10.1.6 to 10.1.18
• IBM Storage Protect Plus vSnap - version 10.1 to 10.1.18
• IBM Storage Protect Plus Server - version 10.1 to 10.1.18
• IBM Storage Sentinel Anomaly Scan Engine - version 1.1.0 to 2.3.0
• IBM watsonx Orchestrate Developer Edition - version 1.4.0 to 2.11.0
• WatsonX BI - version 5.0 to 5.3
• WebSphere Service Registry and Repository - version 8.5

Review the IBM Security Advisory and apply the necessary updates.

On 26^th June 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 149.0.4022.98.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 29^th May 2026, Oracle published a security advisory to address critical vulnerabilities in the following products:

• Oracle Communications Unified Assurance - versions 6.1.1 to 7.0.0
• Oracle Database Server - versions 23.4.0 to 23.26.2
• Oracle E-Business Suite - versions 12.2.3 to 12.2.15
• Oracle Hospitality OPERA 5 Property Services - versions 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and 5.6.28
• Oracle REST Data Services - versions 24.2.0 to 26.1.0

Open-source reporting indicates that CVE-2026-46817 is being exploited.

Review the provided web links and perform the suggested mitigations.

• Oracle Critical Security Patch Update Advisory - May 2026
• Oracle Critical Patch Updates, Security Alerts and Bulletins

On 29^th June 2026, Apple published a security update to address vulnerabilities in the following products:

• iOS and iPadOS - versions prior to 26.5.2
• macOS Tahoe - versions prior to 26.5.2

Review the provided web links and apply the necessary updates.

• About the security content of iOS 26.5.2 and iPadOS 26.5.2
• About the security content of macOS Tahoe 26.5.2
• Apple security releases

On 25^th June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 149.0.7827.200/201 (Windows/Mac), and 149.0.7827.200 (Linux).

Review the Google security bulletins and apply the required updates.

On 24^th June 2026, Drupal published security advisories to address vulnerabilities in the following products:

• Geolocation Field - versions prior to 3.15.0
• WissKI - versions prior to 4.2.0

• Geolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-062
• WissKI - Critical - Access bypass - SA-CONTRIB-2026-059
• Drupal Security Advisories

Between 24^th and 25^th June 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Unified Correlation Analyzer (UCA) - versions prior to 4.4.10
• HPE Telco Service Orchestrator - versions prior to v5.6.1

• HPESBNW05073 rev.1 - HPE Telco Unified Correlation and Automation (UCA), Multiple Vulnerabilities
• HPESBNW05070 rev.1 - HPE Telco Service Orchestrator Software, Multiple Vulnerabilities
• HPE Security Bulletin Library

On 23^rd June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 149.0.7827.196/197 (Windows/Mac), and 149.0.7827.196  (Linux).

Review the Google security bulletins and apply the required updates.

On 23^rd May 2026, Tenable released security updates to address vulnerabilities in Tenable Identity Exposure - versions prior to. 3.93.4.

Review the following Tenable Security Advisory and apply the necessary updates:

• [R1] Tenable Identity Exposure Version 3.93.5 Fixes Multiple Vulnerabilities
• Tenable Product Security Advisories

On 24^th June 2026, n8n published security updates to address vulnerabilities in the following products:

• n8n - versions prior to 2.28.1
• n8n - versions prior to 2.27.4
• n8n - versions prior to 1.123.61

Review the following n8n Security Advisory and apply the necessary updates.

• "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
• Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration
• Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
• Shared Credential Header Leak via HTTP Request Pagination Expression
• n8n Security

On 24^th June 2026, Jenkins published a security advisory to address vulnerabilities in the following products:

• Assembla Plugin - versions prior to 1.4
• External Workspace Manager Plugin - versions prior to 1.3.2
• OWASP ZAP Plugin - versions prior to 1.0.7
• Script Security Plugin - versions prior to 1402.v94c9ce464861

Review the following advisories and apply the necessary updates:

• XXE vulnerability in Assembla Plugin
• Path traversal vulnerability in External Workspace Manager Plugin
• Builds executed on the Jenkins controller by OWASP ZAP Plugin can lead to RCE
• Script security bypass vulnerability in Script Security Plugin
• Sandbox bypass vulnerability in Script Security Plugin
• Jenkins Security Advisories

On 24^th June 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) - versions prior to 19.1.1, 19.0.3 and 18.11.6
• GitLab Enterprise Edition (EE) - versions prior to 19.1.1, 19.0.3 and 18.11.6

Review the following advisories and apply the necessary updates: 

• GitLab Patch Release: 19.1.1, 19.0.3, 18.11.6
• GitLab Releases

Between 22^nd and 23^rd June 2026, VMware published security advisories to address vulnerabilities in the following products:

• VMware Tanzu Data Flow on Kubernetes - versions prior to 2.1.3
• VMware Tanzu Greenplum Backup and Restore - versions prior to 1.33.2
• VMware Tanzu Greenplum Platform Extension Framework - versions prior to 8.0.1
• VMware Tanzu RabbitMQ on Kubernetes - versions prior to 3.13.17
• VMware Tanzu RabbitMQ on Kubernetes - versions prior to 4.0.22
• VMware Tanzu RabbitMQ on Kubernetes - versions prior to 4.1.13
• VMware Tanzu RabbitMQ on Kubernetes - versions prior to 4.2.8
• VMware Tanzu RabbitMQ on Kubernetes - versions prior to 4.3.2
• VMware Tanzu GemFire - versions prior to 10.1.8
• VMware Tanzu RabbitMQ - versions prior to 3.13.17
• VMware Tanzu RabbitMQ - versions prior to 4.0.22
• VMware Tanzu RabbitMQ - versions prior to 4.1.13
• VMware Tanzu RabbitMQ - versions prior to 4.2.8
• VMware Tanzu RabbitMQ - versions prior to 4.3.2
• VMware Tanzu Greenplum - versions prior to 6.33.2
• VMware Tanzu Greenplum - versions prior to 7.8.2

Review the Security Advisories - Tanzu and apply the necessary updates.

Between 15^th and 21^th June 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• Content-Aware Storage - versions 1.0.0 to 1.1.3
• DataStage on Cloud Pak for Data - versions prior to 5.3.1.0
• Decision Optimization for Cloud Pak for Data - versions 5.0 to 5.3.1 - Patch 4 releases
• Host On-Demand (HOD) - versions 16.0 to 16.0.1, versions 15.0 to 15.0.4
• IBM ApplinX - versions prior to 11.1 and 12.1
• IBM Cloud Pak for Data System (CPDS) - versions 1.0.0.0 to 1.0.10.0
• IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data - multiple versions
• IBM Engineering Lifecycle Management on Hybrid Cloud - versions 1.0.0 to 1.3.0
• IBM Enterprise Build of Quarkus - versions 3.27.1 to 3.27.4, versions 3.33.1 to 3.33.2
• IBM EntireX - versions prior to 11.1
• IBM Fusion HCI - versions 2.10.0 to 2.12.1
• IBM Fusion - versions 2.9.0 to 2.12.1
• IBM Guardium Key Lifecycle Manager (SKLM/GKLM) - versions prior to 4.1
• IBM HTTP Server - versions prior to 9.0 and 8.5
• IBM MQ Operator - multiple versions
• IBM Netezza Software - versions prior to 11.3.0.3-IF2
• IBM Operational Decision Manager - multiple versions
• IBM Planning Analytics Local - versions 2.1.0 to 2.1.20
• IBM Robotic Process Automation for Cloud Pak - multiple versions
• IBM Security QRadar Log Management AQL Plugin - versions 1.0.0 to 1.1.5
• IBM Sterling Connect:Direct Web Services - versions 6.3.0 to 6.3.0.18
• IBM Sterling Connect:Direct Web Services - versions 6.4.0 to 6.4.0.7
• IBM Tivoli Netcool Configuration Manager - versions 6.4.2 GA to 6.4.2.24
• IBM Watson Speech Services Cartridge - versions 4.0.0 to 5.3.1
• IBM supplied MQ Advanced container images - multiple versions
• IBM webMethods BPM - versions prior to 12.1 and 11.1
• ICP - Discovery - versions 5.0.0 to 5.3.1
• Langflow OSS - versions 1.0.0 to 1.9.3
• MongoDB Enterprise Advanced with IBM - versions Ops-Manager 8.0.0 to 8.0.21
• MongoDB Enterprise Advanced with IBM - versions migrator 1.0.0 to 1.15.9
• QRadar - versions prior to 7.5.0
• UCD - IBM DevOps Deploy - versions 8.0 to 8.0.1.13, versions 8.1 to 8.1.2.6
• UCD - IBM UrbanCode Deploy - versions 7.2 to 7.2.3.23, versions 7.3 to 7.3.2.18
• WebSphere Application Server - versions prior to v9.0.5.5
• voice-gateway/sip-orchestrator - versions prior to 1.0.8.26

Review the IBM Security Advisory and apply the necessary updates.

Between 15^th and 21^st June 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 16.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 15^th and 21^st June 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell Container Storage Modules - multiple versions
• Dell Data Protection Central - versions 19.10 to 19.12 with Data Protection Central OS Update prior to dpc-osupdate-1.1.27-1
• Dell PowerFlex Custom Node - multiple versions
• Dell PowerFlex Software - versions prior to 4.5.5.2
• Dell PowerFlex Software - versions prior to 5.1.0.1
• Dell Private Cloud - Red Hat - versions prior to 01.04.00.00
• Dell VxFlex Ready Node - versions prior to 2.25.0
• Dell VxRail Appliance - versions prior to 9.1.000
• PowerProtect DB - versions prior to 2.7.9 with Data Protection Central OS Update prior to dpc-osupdate-1.1.27-1

Review the provided Dell Security Advisory and apply the necessary updates.

Between 15^th and 21^st June 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

On 18^th June 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 149.0.4022.80.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 19^th June 2026, JetBrains published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products:

• JetBrains YouTrack - multiple versions
• JetBrains Hub - multiple versions

Review the JetBrains – Fixed security issues and apply the necessary updates.

On 18^th June 2026, Node.js issued security bulletins to address vulnerabilities related to the following products:

• js 22 - versions prior to v22.23.0;
• js 24 - versions prior to v24.17.0;
• js 26 - versions prior to v26.3.1.

Review the web pages below and apply the necessary updates.

• Nodejs - Thursday, 18^th June, 2026 Security Releases
• Nodejs Releases

On 10^th June 2026, Splunk published security advisories to address vulnerabilities in the following products:

• Splunk SOAR - versions prior to 8.5.0
• Splunk Enterprise - multiple versions and platforms
• Splunk Cloud Platform - multiple versions and platforms

• Splunk Security Advisories
• CISA KEV: CVE-2026-20253

On 17^th June 2026, Drupal published security advisories to address vulnerabilities in the following products:

• Drupal core - multiple versions
• Plotly.js Graphing - versions prior to 3.0.2
• Flag attendance field - versions prior to 8.x-1.2
• Formatter Field - versions prior to 2.0.0

The Cybersecurity and Infrastructure Security Agency (CISA) is aware of global reports that malicious cyber actors have targeted internet-accessible Fortinet devices across government and private sector organizations using compromised credentials. This activity, referred to as FortiBleed, involves the exposure of leaked credentials associated with approximately 74,000 Fortinet devices, including firewalls and virtual private network (VPN) gateways.

To defend against this malicious cyber activity, CISA urges impacted Fortinet customers with FortiGate appliances and associated Secure Sockets Layer (SSL) VPN gateways to immediately:

1. Terminate sessions and reset credentials. Terminate all active SSL VPN and administrative sessions. Reset all Fortinet VPN and administrative passwords, especially on internet-facing systems, and enforce strong password policies.
2. Ensure secure credential storage. Confirm your organization's use of the Password-Based Key Derivation Function 2 (PBKDF2) algorithm to store administrator credentials and remove weaker legacy hashes per Fortinet's guidance (see, Fortinet's Technical Tip: Enforcing PBKDF2 as hash function for administrator accounts in FortiOS v7.2.11 and later).
3. Review logs. Review firewall, VPN, authentication, and domain controller logs for lateral movement, unusual access, suspicious accounts, or unauthorized configuration changes.
4. Enable phishing-resistant multifactor authentication (MFA). Require phishing-resistant MFA on all remote access and administrative accounts and ensure it is enforced on all external gateways and administrative interfaces.
5. Reduce the attack surface and lock down management access. Ensure the administration of your firewall is inaccessible from the public internet; restrict Fortinet management interfaces to trusted internal networks; and remove or disable any unauthorized or unnecessary accounts.

See the following resources to determine your organization's potential impact and find additional guidance on the credentials compromised:

• Tech Times: Fortinet FortiGate Credential Leak Hits 73,932 Firewalls: Half the Internet-Facing Fleet
• SOCRadar: FortiBleed: The Compromise of 80,000+ Fortinet Firewalls
• Hudson Rock: FortiBleed: 75,000 Fortinet Firewalls Compromised: Global Enterprises Exposed - Claim Your Ethical Disclosure
• Arctic Wolf: Active FortiBleed Campaign Impacting Fortinet Devices Across 194 Countries
• Fortinet: Attacks at the Speed of AI

On 16^th June 2026, Oracle published a security advisory to address vulnerabilities in multiple products. Included were critical updates for the following: 

• APM - Application Performance Management
• Identity Manager
• Identity Manager Connector
• JD Edwards EnterpriseOne Accounts Payable
• JD Edwards EnterpriseOne General Ledger
• JD Edwards EnterpriseOne Human Resources Management
• JD Edwards EnterpriseOne Order Promising
• JD Edwards EnterpriseOne Project Costing
• JD Edwards EnterpriseOne Tools
• MySQL Cluster
• MySQL NDB Cluster
• MySQL Router
• MySQL Server
• MySQL Shell
• Oracle Access Manager
• Oracle Agile PLM
• Oracle Application Development Framework (ADF)
• Oracle Coherence
• Oracle Communications Convergent Charging Controller
• Oracle Communications Network Charging and Control
• Oracle Communications Network Integrity
• Oracle Data Integrator
• Oracle E-Business Suite
• Oracle Enterprise Manager Base Platform
• Oracle GoldenGate
• Oracle Solaris
• Oracle Unified Directory
• Oracle VM VirtualBox
• Oracle Virtual Directory
• Oracle WebCenter Content
• Oracle WebCenter Enterprise Capture
• Oracle WebCenter Portal
• Oracle WebCenter Sites
• PeopleSoft Enterprise CS Campus Community
• PeopleSoft Enterprise CS Student Financials
• PeopleSoft Enterprise PT PeopleTools
• Siebel Applications
• WebCenter Content: Imaging
• WebLogic Server

Review Oracle Critical Patch Update Advisory - June 2026 and apply the necessary updates.

On 16^th June 2026, JetBrains published security advisories to address JetBrains GoLand - versions prior to 2026.1.3.

Review the JetBrains - Fixed security issues and apply the necessary updates.

On 16^th June 2026, Microsoft published a security update to address vulnerabilities in the Microsoft Malware Protection Engine.

Review the Microsoft Defender Elevation of Privilege Vulnerability (CVE-2026-50656) and apply the necessary updates.

On 16^th June 2026, Atlassian published security advisories to address vulnerabilities in the following products:

• Bamboo Data Center and Server - multiple versions
• Bitbucket Data Center and Server - multiple versions
• Confluence Data Center and Server - multiple versions
• Crowd Data Center and Server - multiple versions
• Fisheye/Crucible - versions 4.9.0 to 4.9.10
• Jira Data Center and Server - multiple versions
• Jira Service Management Data Center and Server - multiple versions

Review the following advisories and apply the necessary updates: 

• Security Bulletin - 16^th June 2026
• Atlassian Security Advisories and Bulletins

On 16^th June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 149.0.7827.155/.156 (Windows/Mac), and 149.0.7827.155 (Linux).

Review the Google security bulletins and apply the required updates.

On 17^th June 2026, Veeam published security advisories to address vulnerabilities in the following products:

• MiCollab - multiple versions
• MiVoice Business Solution Virtual Instance (MiVB SVI) - version 2.1.0.9-2 and prior

Review the following advisories and apply the necessary updates:

• Mitel Product Security Advisory MISA-2026-0005
• Mitel Security Bulletins

On 17^th June 2026, F5 published Quarterly Security Notifications for multiple products. Included were updates for the following:

• F5 DoS for NGINX - version 4.9.0
• F5 WAF for NGINX Instance Manager - versions 5.9.0 to 5.13.1
• NGINX App Protect DoS - versions 4.3.0 to 4.7.0
• NGINX App Protect WAF - versions 5.2.0 to 5.8.0 and 4.10.0 to 4.16.0
• NGINX Open Source - versions 1.30.0 to 1.30.2 and 1.31.0 to 1.31.1
• NGINX Instance Manager - versions 2.17.0 to 2.22.0
• NGINX Gateway Fabric - multiple versions
• NGINX Ingress Controller - multiple versions
• NGINX Plus - version 37.0.0 R33 to 37.01 R36

Review the following F5 Security Advisory and apply the necessary updates.

• K000161614: Out-of-band Security Notification (17^th June 2026)
• MyF5

On 17^th June 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

Cisco ISE (Identity Services Engine) and Cisco ISE-PIC (Passive Identity Connector)

• Cisco ISE and ISE-PIC Releases prior to 3.3 - all versions
• Cisco ISE and ISE-PIC Release 3.3 - versions prior to 3.3 Patch 11
• Cisco ISE and ISE-PIC Release 3.4 - versions prior to 3.4 Patch 6
• Cisco ISE and ISE-PIC Release 3.5 - versions prior to 3.5 Patch 4 (August 2026)

Review the following advisories and apply the necessary updates: 

• Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities
• Cisco Security Advisories

On 17^th June 2026, Splunk published a security update to address vulnerabilities in the Splunk AI Toolkit - versions prior to 5.7.4.

Review the following advisories and apply the necessary updates: 

• OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit
• Splunk Security Advisories

On 14^th April 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• FortiSandbox 4.4 - versions 4.4.0 to 4.4.8
• FortiSandbox 5.0 - versions 5.0.0 to 5.0.5
• FortiAnalyzer Cloud 7.6 - versions 7.6.2 to 7.6.4
• FortiManager Cloud 7.6 - versions 7.6.2 to 7.6.4
• FortiDDoS-F 7.2 - versions 7.2.1 to 7.2.2

Update 1

Open-source reporting indicates that CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 have been exploited.

Review the provided web links and apply the necessary updates.

• OS Command Injection through API endpoint
• Unauthenticated Authentication bypass and Privilege escalation in FortiSandbox
• Heap-based buffer overflow in oftpd daemon
• SQL Injection via API
• Fortinet PSIRT Advisories

On  16^th June 2026, Zyxel published security advisories to address vulnerabilities in GS1900 series switches - multiple versions and models

Review the following advisories and apply the necessary updates:

• Zyxel security advisory for stack-based buffer overflow vulnerability in GS1900 series switches
• Zyxel Advisories

On 16^th June 2026, Mozilla published security advisories to address vulnerabilities in the following products:

• Firefox - versions prior to 152
• Firefox for iOS - versions prior to 152
• Firefox EST - versions prior to 140.12
• Firefox ESR - versions prior to 115.37

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-59
• Mozilla Foundation Security Advisory 2026-58
• Mozilla Foundation Security Advisory 2026-57
• Mozilla Foundation Security Advisory 2026-56
• Mozilla Security Advisories

Between 8^th and 14^th June 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• IBM Aspera Shares - versions 1.9.9 to 1.11.2
• IBM Automation Decision Services - multiple versions
• IBM Cloud Pak for Applications - multiple versions
• IBM Cloud Pak for Data System (CPDS) - versions 1.0.0.0 to 1.0.10.0
• IBM DevOps Code ClearCase -version 11.0
• IBM Enterprise Application Runtimes - versions 1.0 and 1.1
• IBM Enterprise Build of Quarkus - versions 3.27.0 to 3.27.3.SP2
• IBM Event Processing - versions 1.5.0 to 1.5.2
• IBM Guardium Key Lifecycle Manager (SKLM/GKLM) - version 4.1
• IBM Maximo Scheduler Optimization - multiple versions
• IBM Observability with Instana (OnPrem) - versions Build 1.0.285 to 1.0.317
• IBM Process Automation Manager Open Edition Starter Kit for Banking - version 9.3.1
• IBM Rational ClearCase - version 10.0.0
• IBM Rational ClearCase - version 9.1
• IBM Rational ClearQuest - versions 9.1 to 9.1.0.11, versions 10.0 to 10.0.10
• IBM Rational Developer for i (RDi) - version 9.9
• IBM Software Support App (iOS) - versions 4.0.0 to 4.0.1
• IBM Software Support app (Android) - versions 4.0.0 to 4.0.1
• IBM Tivoli Monitoring - versions 6.3.0.7 to 6.3.0.7 Service Pack 22
• IBM Tivoli Network Manager IP Edition - versions 4.2 GA to 4.2.0.24
• IBM Verify Identity Access Digital Credentials - versions 24.06 to 26.03
• IBM WebSphere Application Server Liberty - versions 17.0.0.3 to 26.0.0.5
• IBM WebSphere Application Server - multiple versions
• IBM WebSphere Hybrid Edition - version 5.1
• IBM i - multiple versions
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - versions 4.8.4 to 4.8.5
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - versions 5.0.0 to 5.3.2
• IBM watsonx Orchestrate Developer Edition - versions 1.4.0 to 2.10.0
• ICP - Discovery - versions 5.0.0 to 5.3.1
• Langflow OSS - versions 1.0.0 to 1.8.4
• SPSS Collaboration and Deployment Services - multiple versions
• Technical Support Appliance - multiple versions

Review the IBM Security Advisory and apply the necessary updates.

Between 8^th and 14^th June 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell NativeEdge Orchestrator - versions prior to 4.2.0.0
• iDRAC Tools - versions prior to 11.4.1.0
• PowerEdge - multiple versions
• PowerScale - multiple versions
• PowerStore - multiple versions

Review the following advisories and apply the necessary updates:

• DSA-2026-273: Dell PowerStore T Security Update for Multiple Vulnerabilities
• DSA-2026-256: Security Update for Dell Native Edge Orchestrator (EO)
• DSA-2026-237: Security Update for Dell PowerScale OneFS Multiple Third-Party Component Vulnerabilities
• Dell Security advisories and notices

Between 8^th and 15^th June 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 8^th and 14^th June 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

On 4^th June 2026, Cisco published security advisories to address vulnerabilities in Cisco Catalyst SD-WAN Manager - multiple versions and all deployment types.

On 15^th June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20262 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates, when available.

• Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability (CVE-2026-20262)
• Cisco Security Advisories
• CISA KEV: CVE-2026-20262

On 9^th June 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 1 49.0.4022.62.

Microsoft has indicated that CVE-2026-11645 has an available exploit.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

Between 10 and 11^th June 2026, Spring published security advisories to address vulnerabilities in the following products:

• Spring Cloud Sleuth - versions 3.1.0 to 3.1.13
• Spring Statemachine - multiple versions
• Spring Cloud Gateway - multiple versions
• Spring Integration - multiple versions
• Spring for GraphQL - multiple versions

Review the Spring Security Advisories and apply the necessary updates.

On 10^th June  2026, Oracle published a security advisory to address a critical vulnerability in PeopleSoft Enterprise PeopleTools – versions 8.61 and 8.62.

Open-source reporting indicates that CVE-2026-35273 is being exploited in the wild.

Update 1

On 12^th June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-35273 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and perform the suggested mitigations.

• Oracle Security Alert Advisory - CVE-2026-35273
• Oracle Critical Patch Updates, Security Alerts and Bulletins
• CISA KEV: CVE-2026-35273

On 11^th June  2026, GeoServer published a security advisory to address vulnerabilities in the following products:

• GeoServer - versions prior to 3.0.0
• GeoTools - versions prior to 35.0
• GeoWebCache - versions prior to 2.0.0

Review the provided web links and apply the necessary updates:

• GeoServer 3.0.0 Release
• GeoServer

On 12^th June 2026, FreePBX published security advisories to address vulnerabilities in the following products:

• FreePBX Security-Reporting ucp (FreePBX 16) - versions prior to 0.39
• FreePBX Security-Reporting ucp (FreePBX 17) - versions prior to 0.7
• FreePBX Security-Reporting superfecta (FreePBX 16) - versions prior to 16.0.40
• FreePBX Security-Reporting superfecta (FreePBX 17) - versions prior to 17.0.7

Review the following advisories and apply the necessary updates: 

• Authenticated Command Injection in FreePBX UCP Interface
• Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
• FreePBX Security Advisories

On 11^th June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 149.0.7827.114/115 (Windows/Mac), and 149.0.7827.114 (Linux).

 Review the Google security bulletins and apply the required updates.

On 10^th June 2026, Oracle published a security advisory to address vulnerabilities in PeopleSoft Enterprise PeopleTools - versions 8.61 and 8.62
Open-source reporting indicates that CVE-2026-35273 is being exploited in the wild.

Review the following Oracle Security Advisory and apply the necessary updates:

• Oracle Security Alert Advisory - CVE-2026-35273
• Oracle Critical Patch Updates, Security Alerts and Bulletins

On 10^th June 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) - versions prior to 19.0.2, 18.11.5 and 18.10.8
• GitLab Enterprise Edition (EE) - versions prior to 19.0.2, 18.11.5 and 18.10.8

• GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8
• GitLab Releases

Between 10^th June 2026, Check Point published security advisories to address vulnerabilities in Identity Agent - versions prior to 81.087.0000

Review the following advisories and apply the necessary updates:

• Check Point Response to CVE-2026-10847- Identity Agent Local Privilege Escalation Vulnerability
• Check Point Security

On 9^th June 2026, Ivanti published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Ivanti Sentry - versions 10.5.1, 10.6.1, 10.7.0 and prior
• Ivanti Endpoint Manager Mobile - versions 12.9.0, 12.8.0.2, 12.7.0.1 and prior

• Security Advisory Ivanti Sentry (CVE-2026-10520, CVE-2026-10523)
• Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-6973 and CVE-2026-10727)
• Ivanti Security Advisories
• CISA KEV: CVE-2026-10520

On 9^th June 2026, OpenSSL published security advisories to address vulnerabilities in the following products:

• OpenSSL - versions 4.0.0 to versions prior to 4.0.1
• OpenSSL - versions 3.6.0 to versions prior to 3.6.3
• OpenSSL - versions 3.5.0 to versions prior to 3.5.7
• OpenSSL - versions 3.4.0 to versions prior to 3.4.6
• OpenSSL - versions 3.0.0 to versions prior to 3.0.21
• OpenSSL - versions 1.1.1 to versions prior to 1.1.1zh
• OpenSSL - versions 1.0.2 to versions prior to 1.0.2zq

Review the OpenSSL Security News and apply the necessary updates.

On 9^th June 2026, HPE published security advisories to address vulnerabilities in HPE ProLiant RL300 Gen11 - versions prior to 1.84_04-02-2026.

Review the provided web link and apply the necessary updates, once available:

• HPESBHF05057 rev.1 - HPE RL300 Server Using Arm Processors, Local Disclosure of Privileged Information
• HPE Security Bulletin Library

Between 9 and 10^th June 2026, Spring published security advisories to address vulnerabilities in the following products:

• Spring AMQP - multiple versions
• Spring Authorization Server - multiple versions
• Spring Web Services - multiple versions
• Spring Web Flow - multiple versions
• Spring REST Docs - multiple versions
• Spring Data Commons - multiple versions
• Spring Data Relational - multiple versions
• Spring Security - multiple versions
• Spring Data MongoDB - multiple versions
• Spring Data JDBC - multiple versions
• Spring Data KeyValue - multiple versions
• Spring Data R2DBC - multiple versions
• Spring Data Redis - multiple versions
• Spring Data REST - multiple versions
• Spring for Apache Kafka - multiple versions
• Spring for Apache Pulsar - multiple versions
• Spring Data Commons (transitively affects all Spring Data store modules) - multiple versions

Review the Spring Security Advisories and apply the necessary updates.

On 9^th June 2026, Mozilla published security advisories to address vulnerabilities in the following products:

• Focus for iOS - versions prior to 151.3.1
• Klar for iOS - versions prior to 151.3.1

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-55
• Mozilla Security Advisories

On 9^th June 2026, FreeBSD published security advisories addressing vulnerabilities in all supported versions.

Review the FreeBSD Security Advisories and apply the necessary updates.

On 9^th June 2026, AMD published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Versal Prime Series Gen 2
• Versal AI Edge Series Gen 2
• AMD Management Console (AMC) - versions prior to 14.0.0
• AMD Ryzen Master - versions prior to 2.14.3
• AMD µProf - versions prior to 5.3

Review the following advisories and apply the necessary updates:

• ARM CPU Vulnerability: Bypass of Stage 1 translation, Stage-2 translation, or GPT Protection
• AMD Auto Updater Vulnerability
• AMD Product Security

On 3^rd June 2026, Drupal published security advisories to address vulnerabilities in the following products:

• LocalGov Workflows versions prior to 1.6.0
• Tacjs versions prior to 6.8
• Commerce Core 3.3.0 versions prior to 3.3.6
• Anti-Spam by CleanTalk versions prior to 9.7.1

Review the following Drupal Security Advisory and apply the necessary updates.

• LocalGov Workflows versions prior to 1.6.0
• Tacjs versions prior to 6.8
• Commerce Core 3.3.0 versions prior to 3.3.6
• Anti-Spam by CleanTalk versions prior to 9.7.1
• Drupal Security Advisories

On 10^th June 2026, Jenkins published a security advisory to address vulnerabilities in the following products:

• Jenkins weekly - version 2.567 and prior
• Jenkins LTS - version 2.555.2 and prior

Review the following advisories and apply the necessary updates:

• Jenkins Security Advisory 2026-06-10
• Jenkins Security Advisories

On 10^th June 2026, FreePBX published security advisories to address vulnerabilities in the following products:

• FreePBX Security-Reporting music (FreePBX 16) - versions 16.0.4 and prior
• FreePBX Security-Reporting music (FreePBX 17) - versions 17.0.6 and prior

Review the following advisories and apply the necessary updates: 

• Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module
• FreePBX Security Advisories

On 10^th June 2026, Veeam published security advisories to address vulnerabilities in the following products:

• OTP - versions prior to 27.3.4.13, 28.5.0.2 and 29.0.2
• erts (OTP) - versions prior to 15.2.7.9, 16.4.0.2 and 17.0.2
• inets (otp) - versions prior to 9.7.1, 9.6.2.2 and 9.3.2.6
• ssl (OTP) - versions prior to 11.7.2, 11.6.0.2 and 11.2.12.9

Review the following advisories and apply the necessary updates:

• Unbounded Stack Buffer Overflow in SCTP Error Cause Parsing in inet_drv
• Distribution-over-TLS LAN Allowlist is Silently Bypassed
• httpc leaks Authorization header to cross-origin redirect targets
• Erlang Security

On 10^th June 2026, HPE published security advisories to address vulnerabilities in HPE Telco Suite - multiple versions and models.

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05061 rev.1 - HPE Telco Suite, Multiple Vulnerabilities
• HPE Security Bulletin Library

On 10^th June 2026, Palo Alto Networks published security advisories to address vulnerabilities in the following products:

• Cortex XSIAM CommvaultSecurityIQ Marketplace 1.1.0 - versions prior to 1.2.0
• Cortex XSOAR CommvaultSecurityIQ Marketplace 1.1.0 - versions prior to 1.2.0
• Prisma Browser - versions prior to 148.18.4.217

Review the following advisories and apply the necessary updates:

• CVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration
• PAN-SA-2026-0008 Chromium: Monthly Vulnerability Update (June 2026)
• Palo Alto Network Security Advisories

On 10^th June 2026, n8n published security updates to address vulnerabilities in the following products:

• n8n (Credential Exfiltration) - multiple versions
• n8n (Cross-Tenant Credential) - multiple versions
• n8n (n8n MCP Browser) - versions 2.26.2 to 2.25.7
• n8n(SecurityScorecard Node) - multiple versions

Review the following n8n Security Advisory and apply the necessary updates.

• Credential Exfiltration via Permission Bypass
• Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints
• n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions
• SecurityScorecard Node Leaks API Token to User-Controlled Host
• n8n Security

On 9^th June 2026, VMware published security advisories to address vulnerabilities in VMware Tanzu for Valkey on Kubernetes – versions prior to 3.4.1.

Review the following advisories and apply the necessary updates:

• Product Release Advisory - VMware Tanzu for Valkey on Kubernetes 3.4.1
• Security Advisories - Tanzu

On 10^th June 2026, Splunk published a security update to address vulnerabilities in the following products.

• Splunk SOAR - versions prior to 8.5.0
• Splunk Enterprise - multiple versions and platforms
• Splunk Cloud Platform - multiple versions and platforms

Review the Splunk Security Advisories and apply the necessary updates.

On 9^th June 2026, SAP published security advisories to address vulnerabilities in multiple products. Included were updates for the following:

• SAP NetWeaver AS ABAP and ABAP Platform - versions SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816, SAP_BASIS 918, SAP_BASIS 919
• SAP NetWeaver AS ABAP and ABAP Platform - versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 722EXT, 7.53, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 9.16, 9.18, 91.9
• SAP Commerce Cloud and SAP Data Hub - versions HY_COM 2205, HY_DHUB 2205, COM_CLOUD 2211, 2211-JDK21, DHUB_CLOUD 2211
• SAP NetWeaver Application Server Java (Web Container) - version ENGINEAPI 7.50
• SAP Commerce Cloud - versions HY_COM 2205, COM_CLOUD 2211, 2211-JDK21
• SAP NetWeaver AS ABAP and ABAP Platform - versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816
• ODP Data Replication APIs - versions DW4CORE 200, 300, 400, PI_BASIS 2006_1_700, 701, 702, 731, 740, SAP_BW 750, 816
• SAP S/4HANA - versions S4FND 102, 103, 104, 105, 106, 107, 108, 109
• SAP NetWeaver AS Java (JDBC Test Servlet) - version BI_UDI 7.50
• SAP Wily Introscope Enterprise Manager - version WILY_INTRO_ENTERPRISE 10.8
• SAP MDG (Review Match Groups Application) - versions S4CORE 108, SAP_BASIS 916, SAP_BASIS 917, SAP_ABA 816
• SAP Business Objects Business Intelligence Platform - versions ENTERPRISE 430, 2025, 2027
• SAP Fiori (launchpad) - versions SAP_UI 754, 755, 756, 757, 758, 816
• SAP Business Objects - versions ENTERPRISE 430, 2025, 2027
• SAP NetWeaver AS Java - versions SERVERCORE 7.50, CORE-TOOLS 7.50, J2EE-APPS 7.50

Review the SAP Security Patch Day - July 2026 and apply the necessary updates.

On 8^th June 2026, Apache published a security advisory to address vulnerabilities in the Apache HTTP Server - versions prior to 2.4.68.

Review the provided web link and apply the necessary updates.

• Apache HTTP Server 2.4 vulnerabilities
• Apache HTTP Server Project

On 9^th June 2026, Veeam published security advisories to address vulnerabilities in the Veeam Backup and Replication - versions prior to 12.3.2.4854.

Review the following advisories and apply the necessary updates:

• Vulnerability Resolved in Veeam Backup and Replication 12.3.2.4854
• Veeam Knowledge Base

On 9^th June 2026, MISP published a security advisory to address vulnerabilities in the MISP (Malware Information Sharing Platform) - versions prior to v2.5.39.

Review the provided web link and apply the necessary updates.

• MISP
• MISP 2.5.39: New Dashboard Experience, Stronger STIX, Sharper Analyst Workflows

On 9^th June 2026, Ivanti published security advisories to address vulnerabilities in the following products:

• Ivanti Sentry - versions 10.5.1, 10.6.1, 10.7.0 and prior
• Ivanti Endpoint Manager Mobile - versions 12.9.0, 12.8.0.2, 12.7.0.1 and prior

Review the following advisories and apply the necessary updates:

• Security Advisory Ivanti Sentry (CVE-2026-10520, CVE-2026-10523)
• Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-6973 and CVE-2026-10727)
• Ivanti Security Advisories

On 9^th June 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• FortiSandbox 5.0 - versions 5.0.0 to 5.0.5
• FortiSandbox 4.4 - versions 4.4.0 to 4.4.8
• FortiSandbox Cloud 5.0 - versions 5.0.4 to 5.0.5
• FortiSandbox PaaS 5.0 - versions 5.0.4 through 5.0.5

Review the following advisories and apply the necessary updates:

• Second-Order OS Command Injection via JSON Input on start vnc feature
• Fortinet PSIRT Advisories

On 8^th June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 149.0.7827.102/.103 for Windows/Mac, and 49.0.7827.102 for Linux.

Google is aware that an exploit for CVE-2026-11645 exists in the wild.

Update 1                                                                     

On 9^th June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-11645 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates when available.

• Google Chrome Security Advisory
• CISA KEV: CVE-2026-11645

On 9^th June 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• .NET 10.0
• .NET 8.0
• .NET 9.0
• ASP.NET
• Azure Connected Machine Agent
• Azure HorizonDB
• Azure Kubernetes Service
• Azure Local
• Azure Logic Apps
• Azure Machine Learning
• Azure Monitor Agent
• Azure Monitor Agent Metrics Extension
• Azure Orbital Spatio
• Azure Privileged Identity Management (PIM)
• Azure Resource Manager
• Azure SDK
• Azure Stack Edge
• Azure Stack HCI
• Azure Virtual Network Gateway
• Copilot Chat
• Linux kernel - Microsoft MANA Network Driver
• M365 Copilot for Desktop
• Microsoft .NET Framework
• Microsoft 365
• Microsoft 365 Copilot
• Microsoft Authenticator
• Microsoft Bing
• Microsoft Confluence SAML SSO plugin
• Microsoft Data Formulator
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics 365
• Microsoft Edge
• Microsoft Entra ID
• Microsoft Excel
• Microsoft Excel 2016
• Microsoft Exchange Online
• Microsoft Exchange Server
• Microsoft Global Secure Access (GSA)
• Microsoft Graph
• Microsoft JIRA SAML SSO plugin
• Microsoft Live Share Canvas SDK
• Microsoft Malware Protection Engine
• Microsoft Office
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365
• Microsoft Office LTSC
• Microsoft Outlook for iOS
• Microsoft PC Manager
• Microsoft Planetary Computer Pro (GeoCatalog)
• Microsoft Power Pages
• Microsoft PowerPoint for Android
• Microsoft PowerToys
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft Teams
• Microsoft Visual Studio
• Microsoft Visual Studio 2026
• Microsoft Word
• Microsoft Word 2016
• Nuance PowerScribe 360
• Nuance PowerScribe One
• Office Online Server
• Power Automate for Desktop
• PowerScribe One
• Remote Desktop client
• Visual Studio
• Visual Studio Code
• Windows 10
• Windows 11
• Windows Admin Center
• Windows Admin Center in Azure Portal
• Windows App Client
• Windows Narrator Braille
• Windows Server 2012
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025

Review the Microsoft Security Updates and apply the necessary updates (Security Update Guide).

On 9^th June 2026, Adobe published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• Adobe Experience Manager (AEM) - version AEM Cloud Service (CS)
• Adobe Experience Manager (AEM) - version 6.5 LTS SP1 and prior
• Adobe Experience Manager (AEM) - version SP24 and prior
• Adobe Experience Manager 6.5 LTS - version SP1 and prior
• Adobe Experience Manager 6.5 - version 6.5.24.0 and prior
• Adobe InDesign - version ID21.3 and prior
• Adobe InDesign - version ID20.5.3 and prior
• Adobe InCopy - version 21.3 and prior
• Adobe InCopy - version 20.5.3 and prior
• Adobe Substance 3D Sampler - version 6.0.0 and prior
• Content Credentials JS SDK - version @contentauth/c2pa-web@0.8.3 and prior
• Content Credentials Rust SDK - version c2pa-v0.85.1 and prior
• Adobe Dreamweaver - version 21.7 and prior
• Adobe Acrobat - version 26.001.21651 and prior
• Adobe Reader - version 26.001.21651 and prior
• Adobe 2024 - version 24.001.30365 and prior
• Adobe ColdFusion 2025 - Update 8 and prior
• Adobe ColdFusion 2023 - Update 19 and prior
• Adobe Format Plugins - version 1.1.52 and prior
• Adobe Campaign Classic - version ACC v7: 7.4.3 build 9394 and prior

Review the Adobe Security Advisories and apply the necessary updates.

On 9^th June 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Aruba Networking Management Software (Airwave) - version 8.3.0.6 and prior
• HPE Aruba Networking Private 5G Management Dashboard - all versions

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05064 rev.1 - Status of NGINX ngx_http_rewrite_module Vulnerability (CVE-2026-42945) in HPE Aruba Networking Products
• HPE Security Bulletin Library

On 4^th June 2026, Cisco published a security advisory to address a vulnerability in the Cisco Catalyst SD-WAN Manager.

Update 1

On 9^th June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20245 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates:

• Cisco Catalyst SD-WAN Manager Authenticated Privilege Escalation Vulnerability (CVE-2026-20245)
• Cisco Security Advisories
• CISA KEV: CVE-2026-20245

On 3^rd June 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included was a critical update for the following:

• Cisco Unified Communications Manager (CM) Release 14 - versions prior to 14SU6
• Cisco Unified Communications Manager (CM) Release 15 - versions prior to 15SU5 (Sep 2026) or COP
• Cisco Unified Communications Manager Session Management Edition (CM SME) release 14 - versions prior to 14SU6
• Cisco Unified Communications Manager Session Management Edition (CM SME) release 15 - versions prior to 15SU5 (Sep 2026) or COP

• Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
• Cisco Security Advisories
• CISA KEV: CVE-2026-20230

Between 1^st and 7^th June 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• Decision Optimization for Cloud Pak for Data – version 5.0 to 5.3.1 - Patch 2 releases
• DevOps Test UI (Test UI) - versions Test UI 11.0 to 11.0.6
• DevOps Test UI (Test UI) - versions Test UI 11.0 to 11.0.7
• FileNet Content Manager - multiple versions
• IBM App Connect Enterprise Certified Containers Operands - multiple versions
• IBM App Connect Operator - multiple versions
• IBM Automation Assets in IBM Cloud Pak for Integration (CP4I) - multiple versions
• IBM Big SQL on Cloud Pak for Data - multiple versions
• IBM Bob - versions 1.0.0, 1.0.1 and 1.0.2
• IBM Business Automation Insights - multiple versions
• IBM Business Automation Workflow traditional and IBM Business Automation Workflow Enterprise Service Bus - multiple versions
• IBM Enterprise Content Management Text Search - multiple versions
• IBM ICP - Discovery - version 5.0.0 to 5.3.1
• IBM InfoSphere Optim Archive Viewer - versions 11.7.0.0 to 11.7.0.13
• IBM Maximo Application Suite - Visual Inspection Component - multiple versions
• IBM Maximo Application Suite - versions 9.0 and 9.1
• IBM Netezza Appliance - versions 1.0.0.0 and 1.0.0.1
• IBM Observability with Instana (OnPrem) - all versions
• IBM Platform Navigator in IBM Cloud Pak for Integration (CP4I) - multiple versions;
• IBM Security QRadar EDR - versions 3.12 to 3.12.24
• IBM Security SOAR - multiple versions
• IBM Sterling Connect:Direct Web Services - versions 6.3.0 to 6.3.0.18
• IBM Sterling Connect:Direct Web Services - versions 6.4.0 to 6.4.0.7
• IBM Sterling Connect:Direct for Microsoft Windows - versions 6.3.0.0 to 6.3.0.6_iFix050
• IBM Sterling Connect:Direct for Microsoft Windows - versions 6.4.0.0 to 6.4.0.4_iFix021
• IBM Storage Scale - versions 6.0.0.0 to 6.0.0.2
• IBM Storage Scale - versions 5.2.0.0 to 5.2.3.7
• IBM Verify Antenna - versions 25.05.0 to 26.03.0
• IBM Verify Identity Access Container - multiple versions
• IBM Verify Identity Access - multiple versions
• IBM WebSphere Application Server - versions 9.0 and 8.5
• IBM WebSphere Remote Server - versions 8.5, 9.0 and 9.1
• Jazz for Service Management - version 1.1.3 to 1.1.3.27
• Maximo AI Service - version 9.1.0
• QRadar AI Assistant - versions 1.0.0 to 1.5.0
• QRadar Log Source Management App - versions 1.0.0 to 7.0.14
• Rational Functional Tester (RFT) - multiple versions

Review the IBM Security Advisory and apply the necessary updates.

Between 1^st and 7^th June 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell Private Cloud -VMware - versions prior to 01.04.00.00
• PowerSwitch Z9864F-ON - versions prior to v3.5.0
• Dell Automation Platform - versions prior to 2.1.0.0
• Dell VxRail Appliance - versions prior to 8.0.390

Review the following advisories and apply the necessary updates:

• DSA-2026-242: Security Update for Dell Private Cloud - VMware for Multiple Third-Party Component Vulnerabilities
• DSA-2026-252: Security Update for Dell Networking Products for AMI MegaRAC SPx13
• DSA-2026-244: Security Update for Dell Automation Platform for Multiple Third-Party Component Vulnerabilities
• DSA-2026-245: Security Update for Dell VxRail for Multiple Third-Party Component Vulnerabilities
• Dell Security advisories and notices

Between 1^st  and 7^th June 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 14.04 LTS
• Ubuntu 16.04 LTS
• Ubuntu 18.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10
• Ubuntu 26.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 1^st and 7^th June 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

On 8^th June 2026, Spring published security advisories to address vulnerabilities in Micrometer / Micrometer-core / jetty11 / jetty12 - multiple versions.

Review the provided web links and apply the necessary updates.

• CVE-2026-40984: Micrometer HTTP server instrumentations DoS vulnerability
• CVE-2026-40983: Micrometer gRPC server instrumentation DoS vulnerability
• Spring Security Advisories

Between 8^th June 2026, Check Point published security advisories to address vulnerabilities in the following products:

• Mobile Access / SSL VPN, Remote Access VPN, Spark Firewall - multiple versions
• Security Gateways, Spark Firewall - multiple versions

Review the following advisories and apply the necessary updates:

• Security Advisory - Action Required - Active Exploitation of Check Point VPN Authentication Bypass (CVE-2026-50751)
• Check Point Security

8^th June 2026, VMware published security advisories to address vulnerabilities in the following products:

• VMware Cloud Foundation - versions prior to 9.1.0.0
• VMware vSphere Foundation - versions prior to 9.1.0.0
• VMware Cloud Foundation - versions prior to 9.0.2.0 EP2
• VMware vSphere Foundation - versions prior to 9.0.2.0 EP2
• VMware Aria Operations - versions prior to 8.18.7
• VMware Aria Operations - versions prior to 8.18.6
• VMware Cloud Foundation - versions prior to 5.x
• VMware Telco Cloud Platform - versions prior to 5.x

Review the following advisories and apply the necessary updates:

• VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723, and CVE-2026-41724)
• Security Advisories - VMware Cloud Foundation

On 4^th June 2026, Cisco published security advisories to address vulnerabilities in Cisco Catalyst SD-WAN Manager.

Review the following advisories and apply the necessary updates:

• Cisco Catalyst SD-WAN Manager Authenticated Privilege Escalation Vulnerability (CVE-2026-20245)
• Cisco Security Advisories

Between 2^nd and 3^rd June 2026, SolarWinds published security advisories to address vulnerabilities in the following products:

• SolarWinds Serv-U - versions prior to 15.5.4 HF1
• SolarWinds Web Help Desk - versions prior to 2026.2

Update 1

On 5^th June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-28318 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• SolarWinds Web Help Desk Denial-of-Service Vulnerability (CVE-2026-28299)
• SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability (CVE-2026-28318)
• SolarWinds Security Vulnerabilities
• CISA KEV: CVE-2026-28318

On 1^st June 2026, Docker published security updates to address a vulnerability in Docker Desktop - versions prior to 4.76.0.

Review the following provided web links and apply the necessary updates:

• Docker Desktop Release Notes
• Docker security announcements

Between 2^nd and 3^rd June 2026, SolarWinds published security advisories to address vulnerabilities in the following products:

• SolarWinds Serv-U - versions prior to 15.5.4 HF1
• SolarWinds Web Help Desk - versions prior to 2026.2

• SolarWinds Web Help Desk Denial-of-Service Vulnerability (CVE-2026-28299)
• SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability (CVE-2026-28318)
• SolarWinds Security Vulnerabilities

On 2^nd June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 149.0.7827.53/54 for Windows/Mac, and 149.0.7827.53 for Linux.

 Review the Google security bulletins and apply the required updates.

On 3^rd June 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Cisco Unified Communications Manager (CM) Release 14 - versions prior to 14SU6
• Cisco Unified Communications Manager (CM) Release 15 - versions prior to 15SU5 (Sep 2026) or COP
• Cisco Unified Communications Manager Session Management Edition (CM SME) release 14 - versions prior to 14SU6
• Cisco Unified Communications Manager Session Management Edition (CM SME) release 15 - versions prior to 15SU5 (Sep 2026) or COP

Cisco has indicated that a proof-of-concept exploit code is available for CVE-2026-20230.

Review the following advisories and apply the necessary updates: 

• Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
• Cisco Security Advisories

2^nd June 2026, VMware published security advisories to address vulnerabilities in the following products:

• VMware Tanzu GemFire Management Console - versions prior to 1.4.5
• VMware Tanzu Data Lake - versions prior to 4.1.0
• VMware Tanzu for Postgres - versions prior to 18.4.0
• VMware Tanzu for Postgres - versions prior to 17.10.0
• VMware Tanzu for Postgres - versions prior to 16.14.0
• VMware Tanzu for Postgres - versions prior to 15.18.0
• VMware Tanzu for Postgres - versions prior to 14.23.0

Review the following advisories and apply the necessary updates:

• Product Release Advisory - VMware Tanzu GemFire Management Console
• Product Release Advisory - VMware Tanzu Data Lake 4.1.0
• Product Release Advisory - VMware Tanzu for Postgres 18.4.0, 17.10.0, 16.14.0, 15.18.0, 14.23.0
• Security Advisories - VMware Cloud Foundation

2^nd June 2026, Samba published security advisories to address vulnerabilities in the following products:

• Samba: 4.22.x -  versions prior to 4.22.10)
• Samba: 4.23.x - versions prior to 4.23.8)
• Samba: 4.24.x - versions prior to 4.24.3)

Review the following advisories and apply the necessary updates:

• Samba: 4.22.x -  versions prior to 4.22.10)
• Samba: 4.23.x - versions prior to 4.23.8)
• Samba: 4.24.x - versions prior to 4.24.3)

On 2^nd June 2026, Samsung published a security advisory to address vulnerabilities in Samsung mobile devices - versions prior to SMR-JUN-2026.

Review the Samsung Security Updates and apply the necessary updates.

On 1^st June 2026, Android published a security bulletin to address vulnerabilities affecting Android devices.

The vendor indicates that CVE-2025-48595 may be under limited, targeted exploitation.

Review the Android Security Bulletin and apply the necessary updates.

On 1^st June 2026, HPE published a security advisory to address vulnerabilities in the following products:

• HP Poly VVX - versions prior to UCS 6.4.8 – Pending
• HP Poly Trio 8300 - versions prior to UCS 8.1.7
• HP Poly Trio 8500 - versions prior to UCS 7.2.8
• HP Poly Trio 8800 - versions prior to UCS 7.2.8

Review the provided web link and apply the necessary updates, once available:

• Poly Voice - Possible Remote Control of Certain Poly Devices

On 29^th May 2026, JetBrains published security advisories to address vulnerabilities in the following products:

• JetBrains IntelliJ IDEA - versions prior to 2026.1.1
• JetBrains TeamCity - versions prior to 2026.1.1 and 2025.11.5
• JetBrains YouTrack - versions prior to 2026.1.13162

Review the JetBrains – Fixed security issues and apply the necessary updates.

On 2^nd June 2026, Mozilla published security advisories to address vulnerabilities in Firefox - versions prior to 151.0.3.

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-54
• Mozilla Security Advisories

On 2^nd June 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Telco Network Function Virtualization Orchestrator - version 7.6.0 and prior
• HPE Aruba Networking ArubaOS-CX Switches - version 10.16.1000 and prior
• HPE Aruba Networking ArubaOS-CX Switches - version 10.15.0005 and prior
• HPE Aruba Networking ArubaOS-CX Switches - version 10.13.1080 and prior
• HPE Aruba Networking ArubaOS-CX Switches - version 10.16.1000 and prior

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05062 rev.1 - Status of OpenSSH Keystroke Obfuscation Bypass (CVE-2024-39894) on Aruba OS-CX
• HPESBNW05060 rev.1 - HPE Telco Network Function Virtualization Orchestrator, Multiple Vulnerabilities
• HPE Security Bulletin Library

Between 25^th and 31^st May 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• IBM Aspera Enterprise WebApps - versions 1.0.0 to 1.0.2.1
• IBM Business Automation Workflow containers and traditional - multiple versions
• IBM Cloud Pak for Business Automation - multiple versions
• IBM Cloud Pak for Security - versions 1.10.0.0 to 1.10.11.0
• IBM Control Center - multiple versions
• IBM DataStax Enterprise - versions 5.1, 6.7, 6.8 and 6.9
• IBM Edge Application Manager - multiple versions
• IBM Engineering Lifecycle Management - Jazz Foundation - multiple versions
• IBM Library Support for Spring - version 3.3
• IBM License Metric Tool - versions 9.2.0 to 9.2.43
• IBM Maximo Application Suite - Monitor Component - version 9.1.0.0
• IBM Observability with Instana (Agent) - versions Build 1.0.303 to 1.0.318
• IBM Process Mining - versions 2.0.0 to 2.1.1 IF001
• IBM Security SOAR - multiple versions
• IBM Tivoli Application Dependency Discovery Manager - versions 7.3.0.0 to 7.3.0.12
• QRadar Suite Software - versions 1.10.12.0 to 1.11.10.0
• WebSphere Service Registry and Repository - version 8.5

Review the IBM Security Advisory and apply the necessary updates.

Between 25^th and 31^st May 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• PowerEdge Server Chipset Driver - multiple applications and versions
• Data Lakehouse - versions prior to 1.8.0.0
• Dell Enterprise SONiC Distribution - versions prior to 4.5.2
• Dell Unity - versions prior to 5.5.4

Review the following advisories and apply the necessary updates:

• DSA-2026-232: Security Update for AMD-based PowerEdge Server Chipset Driver Vulnerabilities
• DSA-2026-199: Security Update for Dell Data Lakehouse Multiple Third-Party Component Vulnerabilities
• DSA-2026-241: Security Update for Dell Enterprise SONiC Distribution Vulnerabilities
• DSA-2026-211 -: Security Update for Dell Unity, Dell UnityVSA and Dell Unity XT Security Update for Multiple Vulnerabilities
• Dell Security advisories and notices

Between 25^th and 31^st May 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10

Review the following advisories and apply the necessary updates:

• USN-8305-2: Linux kernel (Low Latency) vulnerabilities
• USN-8305-1: Linux kernel (Intel IoTG Real-time) vulnerabilities
• USN-8310-1: Linux kernel (Azure) vulnerabilities
• Ubuntu Security Notices

Between 25^th and 31^st May 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

On 1^st June 2026, Mozilla published security advisories to address vulnerabilities in Firefox for iOS - versions prior to 151.2.

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-53
• Mozilla Security Advisories

On 1^st June 2026, Ivanti published security advisories to address vulnerabilities in the following products:

• Ivanti Neurons for ITSM (On-Premises) - version 2025.4 and prior
• Ivanti Neurons for ITSM (Cloud) - version 2026.1 and prior

Review the following advisories and apply the necessary updates:

• Security Advisory Ivanti Neurons for ITSM (CVE-2026-9614)
• Ivanti Security Advisories

On 27^th May 2026, Plesk published a security advisory to address a vulnerability in the following product:

• Plesk for Linux - versions prior to 18.0.75.1
• Plesk for Linux - versions prior to 18.0.76.2

Review the provided web links and apply the necessary updates.

• Vulnerability CVE-2026-44962 in Plesk's APS Catalog
• Plesk Support

On 16^th July 2024, Oracle published a security advisory to address vulnerabilities in multiple products. Included were critical updates for the following:

• Oracle Analytics
• Oracle Communications Applications
• Oracle Communications
• Oracle Financial Services Application
• Oracle Fusion Middleware
• Oracle MySQL
• Oracle Siebel CRM

Update 1

On 1^st June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2024-21182 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web link and apply the necessary updates:

• Oracle Critical Patch Update Advisory - July 2024
• CISA KEV: CVE-2024-21182

On 1^st June 2026, Qualcomm published a security bulletin to address vulnerabilities affecting Qualcomm products.

Review the Qualcomm Security Bulletin - June and apply the necessary updates.

29^th May 2026, VMware published security advisories to address vulnerabilities in the following products:

• VMware Tanzu for Valkey - versions prior to 7.2.13
• VMware Tanzu for Valkey - versions prior to 8.0.9
• VMware Tanzu for Valkey - versions prior to 8.1.7
• VMware Tanzu for Valkey - versions prior to 9.0.4

Review the following advisories and apply the necessary updates:

• Product Release Advisory - VMware Tanzu for Valkey 7.2.13, 8.0.9, 8.1.7, 9.0.4
• Security Advisories - VMware Cloud Foundation

On 26^th May 2026, Notepad++ released security updates to address Notepad++ - versions prior to v8.9.6.1.

Review the provided web links and apply the necessary updates.

• Notepad++ v8.9.6.1 release
• Notepad++ community

On 28^th May 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 148.0.3967.96.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 28^th May 2026, Oracle published a security advisory to address vulnerabilities in multiple products. Included were critical updates for the following: 

• Oracle Communications Unified Assurance - versions 6.1.1 to 7.0.0
• Oracle Database Server - versions 23.4.0 to 23.26.2
• Oracle E-Business Suite - versions 12.2.3 to 12.2.15
• Oracle Hospitality OPERA 5 Property Services - versions 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and 5.6.28
• Oracle REST Data Services - versions 24.2.0 to 26.1.0

Review the following Oracle Security Advisory and apply the necessary updates:

• Oracle Critical Security Patch Update Advisory - May 2026
• Oracle Critical Patch Updates, Security Alerts and Bulletins

On 13^th May 2026, Palo Alto Networks published security advisories to address vulnerabilities in the following products:

• PAN-OS 12.1 - versions prior to 12.1.4-h5
• PAN-OS 12.1 - versions prior to 12.1.7
• PAN-OS 11.2 - multiple versions
• PAN-OS 11.1 - multiple versions
• PAN-OS 10.2 - multiple versions

Update 1

On 29^th May 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-0257 to their Known Exploited Vulnerabilities (KEV) Database.

Impacted products for CVE-2026-0257:

• PAN-OS 12.1 - versions prior to 12.1.4-h6
• PAN-OS 12.1 - versions prior to 12.1.7
• PAN-OS 11.2 - multiple versions
• PAN-OS 11.1 - multiple versions
• PAN-OS 10.2 - multiple versions
• Prisma Access 11.2.0 - versions prior to 11.2.7-h13
• Prisma Access 10.2.0 - versions prior to 10.2.10-h36

Review the provided web links, perform the suggested mitigations, and apply the necessary updates.

• CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled
• CVE-2026-0264 PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution
• CVE-2026-0263 PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing
• Palo Alto Network Security Advisories
• CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
• CISA KEV: CVE-2026-0257

On 27^th May 2026, Drupal published security advisories to address vulnerabilities in Drupal AlternativeCommerce (Basket) - versions prior to 2.1.17.

Review the following Drupal Security Advisory and apply the necessary updates:

• Drupal AlternativeCommerce (Basket) - Highly critical - Arbitrary PHP code execution - SA-CONTRIB-2026-038
• Drupal Security Advisories

On 27^th May 2026, Veeam published security advisories to address vulnerabilities in the following products:

• Veeam Backup for AWS 10.1 - versions prior to 10.1.0.40
• Veeam Backup for Google Cloud 7.0.1 - versions prior to 7.0.1.4
• Veeam Backup for Microsoft Azure 8.1 Patch 2 - versions prior to 8.0.236
• Veeam Recovery Orchestrator - versions prior to 13.0.2.27

Review the following advisories and apply the necessary updates:

• List of Security Fixes and Improvements in Veeam Recovery Orchestrator
• Release Information for Veeam Backup for AWS 10.1
• Release Information for Veeam Backup for Google Cloud 7.0.1
• Release Information for Veeam Backup for Microsoft Azure 8.1 Patch 2
• Veeam Knowledge Base

On 27^th May 2026, Zimbra published security advisories to address vulnerabilities in Zimbra Daffodil - versions prior to v10.1.17.

Review the following Zimbra Security Advisory and apply the necessary updates:

• Zimbra Daffodil (v10.1.17) Patch Release
• Zimbra Patch Release Updates

On 27^th May 2026, Veeam published security advisories to address vulnerabilities in the following products:

• OTP - versions prior to 29.0.1, 28.5.0.1, 27.3.4.12 and 26.2.5.21
• Public_key (OTP) - versions prior to 1.21.1, 1.20.3.1, 1.17.1.3 and 1.15.1.7

Review the following advisories and apply the necessary updates:

• Name Constraints and Subject CommonName Fallback in TLS hostname Verification
• public_key Accepts non-CA Certificate as Intermediate Issuer, Enabling Chain Forgery
• OCSP Responder Certificate Accepted After Expiry in public_key
• Erlang Security

On 27^th May 2026, Veeam published security advisories to address vulnerabilities in the following products:

• Connect 2024H2 - versions prior to Update 25 (v5.26.191)
• Connect 2025H1 - versions prior to Update 19 (v5.29.237)
• Connect 2025H2 - versions prior to Update 9 (v5.37.140)

Review the following advisories and apply the necessary updates:

• Tanium Security Advisories - TAN-2026-015
• Tanium Security Advisories - TAN-2026-014
• Tanium Security Advisories

On 28^th May 2026, Veeam published security advisories to address vulnerabilities in the following products:

• Mitel Standard Linux - versions 12.x and prior
• MiVoice 5000 - versions 8.x and prior
• MiVoice Border Gateway - versions 11.6.x, 12.x and prior
• MiVoice Business - versions 10.1.x to 10.5.x
• MiVoice Business Solution Virtual Instance - versions 2.x and prior
• MiVoice MX-ONE - versions 7.3 to 7.8 and version 8.x and prior
• OpenScape 4000 - versions V10 R1.x, V11 R0.22, V11 R1.26 and prior
• OpenScape Branch - versions V10.3 and V11.x and prior
• OpenScape SBC - versions V10.3 and V11.x and prior
• OpenScape Voice Server - versions V9R3 JITC, V10, V11 and prior
• MiCollab - versions 10.x and prior
• MiCloud Management Portal - versions 6.3.x and prior
• Mitel Open Integration Gateway - versions 4.3.x and prior
• Mitel Performance Analytics MPA - versions 3.6x and prior
• OpenScape Contact Media Service (used by Mitel CX and OpenScape Contact Center) - versions V12Rx and prior
• Mitel SIP DECT - versions 9.1, 9.2, 10.0, 10.1 and prior
• OpenScape Xpert Clients 6010P - versions V7, V8 and prior

Review the following advisories and apply the necessary updates:

• Linux Kernel Local Privilege Escalation Vulnerabilities "Dirty Frag" (CVE-2026-43284, CVE-2026-43500)
• Mitel Security Bulletins

On 26^th May 2026, Hitachi published security advisories to address vulnerabilities in the following products:

• Cosminexus Developer's Kit for Java
• Hitachi Automation Director - all versions
• Hitachi Configuration Manager - all versions
• Hitachi Compute Systems Manager - all versions
• Hitachi Developer's Kit for Java
• Hitachi Device Manager - all versions
• Hitachi Dynamic Link Manager - versions prior to 9.0.0-00
• Hitachi Global Link Manager - all versions
• Hitachi Infrastructure Analytics Advisor (English version) - multiple components and versions
• Hitachi Ops Center Administrator (English version) - all versions
• Hitachi Ops Center Analyzer (English Version) - multiple components and versions
• Hitachi Ops Center Analyzer Common Services - all versions
• Hitachi Ops Center Analyzer Viewpoint (English version) - versions 10.8.1-00 to versions prior to 11.0.8-00
• Hitachi Ops Center API Configuration Manager - all versions
• Hitachi Ops Center Automator - all versions
• Hitachi Ops Center Viewpoint (Japanese version) - all versions
• Hitachi Replication Manager - versions prior to 9.0.0-00
• Hitachi Tiered Storage Manager - all versions
• Hitachi Tuning Manager - all versions

• Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint
• Multiple Vulnerabilities in Cosminexus
• Multiple Vulnerabilities in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center
• Hitachi Vulnerability Information

On 26^th May 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitHub Enterprise Server - versions 3.20.x prior to 3.20.3
• GitHub Enterprise Server - versions 3.19.x prior to 3.19.7
• GitHub Enterprise Server - versions 3.18.x prior to 3.18.10
• GitHub Enterprise Server - versions 3.17.x prior to 3.17.16
• GitHub Enterprise Server - versions 3.16.x prior to 3.16.19

• Enterprise Server 3.20.3
• Enterprise Server 3.19.7
• Enterprise Server 3.18.10
• Enterprise Server 3.17.16
• Enterprise Server 3.16.19
• Investigation update: GitHub Enterprise Server signing key rotation

On 12^th May 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• Azure AI Foundry
• Azure Cloud Shell
• Azure Connected Machine Agent
• Azure DevOps
• Azure Logic Apps
• Azure Machine Learning
• Azure Managed Instance for Apache Cassandra
• Azure Monitor Action Group notification system
• Azure Monitor Agent
• Azure Monitor Agent Metrics Extension
• Azure SDK for Java
• Copilot Chat (Microsoft Edge)
• Dynamics 365 Customer Insights
• M365 Copilot for Desktop
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 3.5 AND 4.7.2
• Microsoft .NET Framework 3.5 AND 4.8
• Microsoft .NET Framework 3.5 AND 4.8.1
• Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
• Microsoft .NET Framework 4.8
• Microsoft 365
• Microsoft 365 Copilot for Android
• Microsoft 365 Copilot's Business Chat
• Microsoft Confluence SAML SSO plugin
• Microsoft Data Formulator
• Microsoft Dynamics 365
• Microsoft Dynamics 365 Business Central
• Microsoft Edge (Chromium-based)
• Microsoft Enterprise Security Token Service (ESTS)
• Microsoft Excel 2016
• Microsoft Excel for Android
• Microsoft JIRA SAML SSO plugin
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Office for Android
• Microsoft Outlook for iOS
• Microsoft Partner Center
• Microsoft PowerPoint for Android
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Teams
• Microsoft Teams for Android
• Microsoft Visual Studio 2017
• Microsoft Visual Studio 2019
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Word 2016
• Microsoft Word for Android
• Office Online Server
• Power Automate for Desktop
• Visual Studio Code
• Visual Studio Code - Live Preview extension
• Windows 10
• Windows 11
• Windows Admin Center
• Windows Admin Center in Azure Portal
• Windows Server 2012
• Windows Server 2016
• Windows Server 2019
• Windows Server 2025

Update 1

On 21^st May 2026, Microsoft published an out-of-band (OOB) security update to address CVE-2026-45659, an additional vulnerability impacting Microsoft SharePoint Enterprise Server 2019, Microsoft SharePoint Server 2016 and Microsoft SharePoint Server Subscription Edition. The CVE was inadvertently omitted from the May 2026 Security Updates.

Review the provided web links and apply the necessary updates.

• May 2026 Security Updates
• Security Update Guide
• Microsoft SharePoint Remote Code Execution Vulnerability CVE-2026-45659

On 27^th May 2026, Veeam published security advisories to address vulnerabilities in the following products:

• Veeam Backup & Replication - 13 versions prior to 13.0.2.29
• Veeam ONE - versions prior to 13.0.2.6723
• Veeam Service Provider Console - 9.2 versions prior to 9.2.1.33875

Review the following advisories and apply the necessary updates:

• Vulnerabilities Resolved in Veeam Backup & Replication 13.0.2
• List of Security Fixes and Improvements in Veeam Service Provider Console
• List of Security Fixes and Improvements in Veeam ONE
• Vulnerability Resolved in Veeam Service Provider Console 9.2.1
• Veeam Knowledge Base

On 27^th May 2026, Jenkins published a security advisory to address vulnerabilities in the following products:

• Active Directory Plugin - version 2.4.1 and prior
• AppSpider Plugin - version 1.0.17 and prior
• Bitbucket OAuth Plugin - version 0.17 and prior
• buildgraph-view Plugin - version 1.8 and prior
• Credentials Binding Plugin - version 720.v3f6decef43ea_ and prior
• Email Extension Plugin - version 1933.v45cec755423f and prior
• GitHub Integration Plugin - version 0.7.3 and prior
• Job Import Plugin - version 143.v044a_2e819b_27 and prior
• LDAP Plugin - version 807.v7d7de30930cf and prior
• Pipeline: Groovy Libraries Plugin - version 797.v90ea_a_9b_e45a_0 and prior
• Multijob Plugin - version 662.vd2e0001f6b_b_d and prior

Review the following advisories and apply the necessary updates:

• Jenkins Security Advisory 2026-05-27
• Jenkins Security Advisories

On 27^th May 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) - versions prior to 19.0.1, 18.11.4, 18.10.7
• GitLab Enterprise Edition (EE) - versions prior to 19.0.1, 18.11.4, 18.10.7

Review the following advisories and apply the necessary updates: 

• GitLab Patch Release: 19.0.1, 18.11.4, 18.10.7
• GitLab Releases

On 27^th May 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 148.0.7778.216/217 for Windows, 148.0.7778.215/216 Mac, and 148.0.7778.215 for Linux.

Review the Google security bulletins and apply the required updates.

Between 18^th and 24^th May 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• API Connect - versions V10.0.8.0 to 10.0.8.8
• Analyst Workflow - versions 2.0.0 to 3.0.0
• Data Cataloging - versions 2.1.8 to 2.5.1
• DevOps Test Performance - versions 11.0 to 11.0.6
• IBM App Connect Enterprise Certified Containers Operands - multiple versions
• IBM App Connect Enterprise - versions 12.0.1.0 to 12.0.12.25
• IBM App Connect Enterprise - versions 13.0.1.0 to 13.0.7.1
• IBM App Connect Operator - multiple versions
• IBM App Connect for Manufacturing - versions 13.0.0.0 to 13.0.1.0
• IBM Aspera High-Speed Transfer Endpoint - versions 3.7.4 to 4.4.7 Fix Pack 1
• IBM Aspera High-Speed Transfer Server - versions 3.7.4 to 4.4.7 Fix Pack 1
• IBM Cognos Analytics Mobile - versions 1.1.0 to 1.1.25
• IBM Data Studio client - version 4.2.2
• IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data - multiple versions
• IBM DevOps Code ClearCase - version 11.0
• IBM Fusion HCI - versions 2.10.0 to 2.12.1
• IBM Fusion - versions 2.9.0 to 2.12.1
• IBM Guardium Data Protection - versions 12.0, 12.1 and 12.2
• IBM Library Support for Spring - versions 3.2 to 3.2.25
• IBM Library Support for Spring - version 3.4 to 3.4.16
• IBM MQ Agent - version v1.0.0
• IBM Rational ClearCase - version 10.0.0
• IBM Rational ClearCase - version 9.1
• IBM SPSS Analytic Server - multiple versions
• IBM Security Verify Access OIDC Provider - versions 22.09 to 26.03
• IBM Sterling Transformation Extender - versions 11.0.1.1 and 11.0.2.0
• IBM Storage Defender - Data Protect - versions 2.0.0 to 2.1.3
• IBM Storage Defender - Resiliency Service - versions 2.0.0 to 2.1.3
• IBM Watson Speech Services Cartridge - versions 4.0.0 to 5.3.1
• IBM voice-gateway/media-relay - version 1.0.8.31
• IBM voice-gateway/sip-orchestrator - version 1.0.8.25
• IBM voice-gateway/sms-gateway - version 1.0.8.19
• IBM voice-gateway/stt-adapter - version 1.0.8.20
• IBM voice-gateway/tts-adapter - version 1.0.8.20
• IBM watsonx Code Assistant On Prem - multiple versions
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - versions 4.8.4 to 4.8.5
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - versions 5.0.0 to 5.3.1
• IBM watsonx Orchestrate Developer Edition - versions 1.4.0 to 2.9.0
• Langflow OSS - versions 1.0.0 to 1.9.1
• Rational Business Developer (RBD) - versions 9.6 to 9.6.1.1
• Rational Business Developer (RBD) - versions 9.7 to 9.7.1
• Rational Performance Tester - multiple versions
• SPSS Collaboration and Deployment Services - multiple versions
• z/Transaction Processing Facility - version 1.1

On 24^th May 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Roundcube Webmail - versions prior to 1.6.16
• Roundcube Webmail - versions prior to 1.7.1

• Roundcube Webmail 1.6.16
• Roundcube Webmail 1.71
• Roundcube Open Source Webmail Software

Between 18^th and 24^th May 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell Networking OS10 - versions prior to 10.5.6.13
• SmartFabric Storage Software - versions prior to 1.4.5
• Dell Container Storage Modules - versions 1.6.0 to 1.16.3
• Dell Container Storage Modules - versions 1.11.0 to 1.16.3

• DSA-2026-161: Security Update for Dell Networking OS10 Vulnerabilities
• DSA-2026-235: Security Update for Dell Networking SmartFabric Storage Software Vulnerabilities
• DSA-2026-234: Security Update for Dell Container Storage Modules Hard-coded Credentials Vulnerability
• Dell Security advisories and notices

Between 18^th and 24^th May 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 14.04 LTS
• Ubuntu 16.04 LTS
• Ubuntu 18.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10

Between 18^th and 24^th May 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

On 22^nd May 2026, cPanel published security advisories to address vulnerabilities in the following products:

• ea-nginx - version v1.31.0
• ea-nginx-passenger - version v6.1.2

• Security: CVE-2026-9256 ea-nginx v1.31.1 Security Release - 22nd May 2026
• cPanel Security

On 22^nd May 2026, TP-Link published security advisories to address vulnerabilities in the following products:

• Model RE305 prior to V1_20260515
• Model RE360 prior to V1_20260515
• Model RE580D prior to V1_20260515
• Model RE650 prior to V1_20260429
• Model TL-WA860RE prior to V4_20260515

Review the following advisories and apply the necessary updates:

• Model RE305
• Model RE360
• Model RE580D
• Model RE650
• Model TL-WA860RE

On 21^st May 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 148.0.3967.83.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 21^st May 2026, cPanel published security advisories to address vulnerabilities in the following products:

• cPanel & WebHost Manager (WHM) software - version 11.126.0.63 and later, version 11.134.0.30 and later, version 11.136.0.14 and later, WP Squared 11.138.1.1 and later
• EasyApache4 - versions prior to v25.62

Review the following advisories and apply the necessary updates:

• Security: CVE-2026-33278 cpanel-unbound 1.25.1 Security Release – 21^st May 2026
• Security: EasyApache4 v25.62 Security Release - 21^st May 2026
• cPanel Security

On 20^th May 2026, Drupal published security advisories to address vulnerabilities in Drupal Core - multiple versions.

Update 1

Drupal has indicated that exploit attempts for CVE-2026-9082 are now being detected in the wild.

Update 2

On 22^nd May 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-9082 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates or perform the suggested mitigations.

• Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
• Drupal Security Advisories
• CISA KEV: CVE-2026-9082

On 22^nd May 2026, F5 published Quarterly Security Notifications for multiple products. Included were updates for the following:

• NGINX Plus - multiple versions
• NGINX Open Source - multiple versions
• NGINX Instance Manager - versions 2.17.0 to 2.22.0
• F5 WAF for NGINX - versions 5.9.0 to 5.13.0
• NGINX App Protect WAF - multiple versions
• F5 DoS for NGINX - version 4.9.0
• NGINX App Protect DoS - versions 4.3.0 to 4.7.0
• NGINX Gateway Fabric - multiple versions
• NGINX Ingress Controller - multiple versions

Review the following F5 Security Advisory and apply the necessary updates.

• K000161377: NGINX ngx_http_rewrite_module vulnerability CVE-2026-9256
• MyF5

On 22^nd May 2026, HPE published a security advisory to address vulnerabilities in HPE Telco Universal SLA Management - version 4.6 and prior.

Review the following HPE Security Advisory and apply the necessary updates:

• HPESBNW05058 rev.1 - HPE Telco Universal SLA Management, Multiple Vulnerabilities
• HPE Security Bulletin Library

On 21^st May 2026, Trend Micro published a security advisory to address vulnerabilities in the following products:

• Apex One (on-premise) - server/agent builds prior to 2019 (on-prem) build 17079
• Apex One as a service - SaaS
• Trend Vision One Endpoint - SEP - agent builds prior to 14.0.20731

• ITW SECURITY BULLETIN: Apex One and Vision One - Standard Endpoint Protection (SEP) May 2026 Security Bulletin
• Trend Micro Business Success Vulnerability Response

On 21^st May 2026, FreeBSD published security advisories addressing vulnerabilities in all supported versions.

Review the FreeBSD Security Advisories and apply the necessary updates.

On 21^st May 2026, Trend Micro published a security advisory to address vulnerabilities in the following products:

• Apex One (on-premise) - server/agent builds prior to 2019 (on-prem) build 17079
• Apex One as a service - SaaS
• Trend Vision One Endpoint - SEP - agent builds prior to 14.0.20731

Update 1

On 21^st May 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-34926 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• Apex One and Vision One - Standard Endpoint Protection (SEP) May 2026 Security Bulletin
• Trend Micro Business Success Vulnerability Response
• CISA KEV: CVE-2026-34926

On 20^th May 2026, Splunk published a security update to address vulnerabilities in the following products.

• Splunk User Behavior Analytics - versions prior to 5.4.5
• Splunk AppDynamics Machine Agent - versions prior to 26.4.0
• Splunk AppDynamics Java Agent - versions prior to 26.4.0
• Splunk AppDynamics Private Synthetic Agent - versions prior to 26.4.0
• Splunk AppDynamics Python Agent - versions prior to 26.4.1
• Splunk AppDynamics Cluster Agent - versions prior to 26.4.0
• Splunk AppDynamics Database Agent - versions prior to 26.4.0
• Splunk AppDynamics Analytics Agent - versions prior to 26.4.0
• Splunk AppDynamics Apache Web Server Agent - versions prior to 25.11.1
• Splunk Universal Forwarder - versions 9.4.0 to 9.4.10
• Splunk Enterprise - multiple versions and platforms
• Splunk Cloud Platform - multiple versions and platforms
• Splunk AI Toolkit - versions prior to 5.7.3

Review the Splunk Security Advisories and apply the necessary updates.

On 20^th May 2026, Drupal published security advisories to address vulnerabilities in Drupal Core - multiple versions.

Review the following Drupal Security Advisory and apply the necessary updates.

• Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
• Drupal Security Advisories

On 20^th May 2026, ISC published security advisories to address vulnerabilities in the following products:

• ISC BIND 9 - versions 9.0.0 to 9.16.50
• ISC BIND 9 - versions 9.18.0 to 9.18.48
• ISC BIND 9 - versions 9.20.0 to 9.20.22
• ISC BIND 9 - versions 9.21.0 to 9.21.21
• BIND Supported Preview Edition - versions 9.9.3-S1 to 9.16.50-S1
• BIND Supported Preview Edition - versions 9.18.11-S1 to 9.18.48-S1
• BIND Supported Preview Edition - versions 9.20.9-S1 to 9.20.22-S1

Review the following advisories and apply the necessary updates:

• CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation
• CVE-2026-5947: SIG(0) validation during query flood may lead to undefined behavior
• CVE-2026-5946: Invalid handling of CLASS != IN
• CVE-2026-3593: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
• BIND 9 Security Vulnerability Matrix

On 19^th May 2026, Microsoft published a security advisory to address a critical vulnerability in the following products:

• Microsoft Azure Local
• Microsoft Azure Resource Manager
• Microsoft Azure Portal Windows Admin Center
• Microsoft Bitlocker

• Microsoft Malware Protection Engine - versions prior to 1.1.26040.8
• Microsoft Defender - versions prior to 4.18.26040.7

On 20^th May 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41091 and CVE-2026-45498 to their Known Exploited Vulnerabilities (KEV) Database.

Review the following provided web links and apply the necessary updates when available:

• Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability
• Microsoft Defender Remote Code Execution Vulnerability
• Microsoft Defender Elevation of Privilege Vulnerability
• CISA KEV: CVE-2026-41091
• CISA KEV: CVE-2026-45498

On 19^th May 2026, cPanel published security advisories to address vulnerabilities in cPanel & WebHost Manager (WHM) software - version 11.86.0.45, 11.94.0.32, 11.102.0.43, 11.110.0.120 (cl6110), 11.110.0.121, 11.118.0.68, 11.124.0.41, 11.126.0.62, 11.130.0.26, 11.132.0.35, 11.134.0.29, 11.136.0.13, WP Squared 11.136.1.16 and prior.

Review the following advisories and apply the necessary updates:

• Security: SEC-73728 cPanel & WHM / WP2 Security Update - May 19, 2026
• Security: SEC-73755 cPanel & WHM / WP2 Security Update - May 19, 2026
• cPanel Support Topics

On 19^th April 2026, HPE published a security advisory to address vulnerabilities in the following products:

• HPE Aruba Networking Management Software (Airwave) – version 8.3.0.6 and prior
• HPE Aruba Networking AOS-CX - multiple versions
• HPE Aruba Networking EdgeConnect Orchestrator - all versions
• HPE Aruba Networking Analytics and Location Engine (ALE) - all versions
• HPE Aruba Networking Meridian Asset Tracking - all versions

Review the following HPE Security Advisory and apply the necessary updates:

• HPESBNW05059 rev.1 - Status of Copy Fail Vulnerability on HPE Aruba Networking Products (CVE-2026-31431)
• HPE Security Bulletin Library

On 19^th May 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 148.0.7778.178/179 (Windows/Mac) and 148.0.7778.178 (Linux).

 Review the Google security bulletins and apply the required updates.

On 19^th May 2026, F5 published a security advisory to address a critical vulnerability in the NGINX JavaScript (njs) - versions 0.9.4 to 0.9.8.

Review the following F5 Security Advisory and apply the necessary updates

• K000161307: NGINX ngx_http_js_module vulnerability CVE-2026-8711
• MyF5

On 19^th May 2026, FreePBX published security advisories to address vulnerabilities in the following products:

• FreePBX Security-Reporting cdr (FreePBX 16) - versions 16.0.50 and prior
• FreePBX Security-Reporting cdr (FreePBX 17) - versions 17.0.11 and prior
• FreePBX Security-Reporting dashboard (FreePBX 16) - versions 16.0.22 and prior
• FreePBX Security-Reporting dashboard (FreePBX 17) - versions 17.0.5 and prior

Review the following advisories and apply the necessary updates: 

• Authenticated SQL Injection via ORDER BY in CDR Reports
• Authenticated Local File Inclusion in Dashboard Module
• FreePBX Security Advisories

On 15^th May 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 148.0.3967.70.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 18^th May 2026, HPE published a security advisory to address vulnerabilities in the HPE Unified OSS Console (UOC) - version 3.1.20 and prior.

Review the following HPE Security Advisory and apply the necessary updates:

• HPESBNW05056 rev.1 - HPE Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities
• HPE Security Bulletin Library

On 19^th May 2026, Mozilla published security advisories to address vulnerabilities in the following products:

• Firefox - versions prior to 151
• Firefox ESR - versions prior to 115.36
• Firefox ESR - versions prior to 140.11

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-46
• Mozilla Foundation Security Advisory 2026-47
• Mozilla Foundation Security Advisory 2026-48
• Mozilla Security Advisories

Between 11^th and 17^th May 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• IBM Robotic Process Automation for Cloud Pak - versions 23.0.0 to 23.0.20.5
• IBM Robotic Process Automation for Cloud Pak - versions 30.0.0 to 30.0.1
• IBM Operator for Apache Flink - versions 1.0.0 to 1.5.1
• IBM App Connect Enterprise - versions 13.0.1.0 to 13.0.7.1
• IBM App Connect Enterprise - versions 12.0.1.0 to 12.0.12.25
• ICP Discovery - versions 5.0.0 to 5.3.1
• IBM Operational Decision Manager - multiple versions
• IBM Cloudera Data Platform Private Could Base - versions 7.1.9, 7.3.1 and 7.3.2
• IBM Data Virtualization on Cloud Pak for Data - multiple versions
• IBM Fusion - versions 2.9.0 to 2.12.1
• IBM Fusion HCI - versions 2.10.0 to 2.12.1
• Content-Aware Storage - versions 1.1.2 to 1.1.3
• IBM Engineering AI Hub - versions 1.0.0 and 1.1.0
• IBM Integration Bus for z/OS - versions 10.1.0.0 to 10.1.0.7
• IBM MQ Operator - multiple versions and models
• IBM supplied MQ Advanced container images - multiple versions and models
• IBM Open SDK for Rust on AIX - versions 1.90.0.0, 1.90.0.1, 1.92.0.0 and 1.92.0.1
• IBM Watson Knowledge Catalog on prem - versions 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.1.0, 5.1.1, 5.1.2 and 5.1.3
• IBM Watson Query on Cloud Pak for Data - version 2.2
• IBM Big SQL on Cloud Pak for data - multiple versions
• Platform Navigator in IBM Cloud Pak for Integration (CP4I) - multiple versions
• Automation Assets in IBM Cloud Pak for Integration (CP4I) - multiple versions

Review the IBM Security Advisory and apply the necessary updates.

Between 11^th and 17^th May 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell Enterprise Sonic Distribution - versions prior to 4.5.3
• Dell Live Optics Collector) - versions prior to 27.1.10.1
• Intel 800 Series Ethernet Adapters - versions prior to 30.5.0.13
• Dell PowerEdge with AMD Graphics - multiple models and versions
• PowerScale InsightIQ - versions 5.0.0 to 6.2.0

Review the provided Dell Security Advisory and apply the necessary updates.

Between 11^th and 17^th May 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

Between 11^th and 17^th May 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 16.04 LTS
• Ubuntu 18.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS

Review the following advisories and apply the necessary updates:

• USN-8257-1: Linux kernel (Raspberry Pi) vulnerabilities (25.01)
• USN-8255-1: Linux kernel vulnerabilities (22.04, 20.04)
• USN-8258-1: Linux kernel (Azure) vulnerabilities
• Ubuntu Security Notices

On 19^th May 2026, Atlassian published security advisories to address vulnerabilities in the following products:

• Bamboo Data Center and Server - multiple versions
• Bitbucket Data Center and Server - multiple versions
• Confluence Data Center and Server - multiple versions
• Fisheye/Crucible - versions 4.9.0 to 4.9.9
• Jira Data Center and Server - multiple versions
• Jira Service Management Data Center and Server - multiple versions
• Jira Service Management Data Center and Server - multiple versions

Review the following advisories and apply the necessary updates: 

• Security Bulletin - 19^th May 2026
• Atlassian Security Advisories and Bulletins

On 17^th May 2026, BDNCIRT issued an Advisory regarding AsyncRAT Malware Campaign Leveraging Fraudulent Gambling Infrastructure Targeting Bangladesh.

Review the AsyncRAT Malware Campaign Leveraging Fraudulent Gambling Infrastructure Targeting Bangladesh and take the necessary action.

On 14^th May 2026, Microsoft published a security advisory to address a critical vulnerability in the following products:

• Microsoft Exchange Server 2016 on premises versions (any update level)
• Microsoft Exchange Server 2019 on premises versions (any update level)
• Exchange Server Subscription Edition (SE) on premises versions (any update level)

• Microsoft Exchange Server Spoofing Vulnerability CVE-2026-42897 Security Vulnerability
• Exchange Emergency Mitigation (EM) service
• Exchange Team Blog - Addressing Exchange Server May 2026 vulnerability CVE-2026-42897

On 15^th May 2026, FreePBX published security advisories to address vulnerabilities in the following products:

• FreePBX Security-Reporting userman (FreePBX 16) - versions 16.0.45 and prior
• FreePBX Security-Reporting userman (FreePBX 17) - versions 17.0.7 and prior

Review the following advisories and apply the necessary updates: 

• Unauthenticated Use of Hard-Coded Credentials Vulnerability in Free PBX UCP Interface
• FreePBX Security Advisories

On 13^th May 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) - versions prior to 18.11.3, 18.10.6, and 18.9.7
• GitLab Enterprise Edition (EE) - versions prior to 18.11.3, 18.10.6, and 18.9.7

• GitLab Patch Release: 18.11.3, 18.10.6, 18.9.7
• GitLab Releases

On 12^th May 2026, MongoDB published security advisories to address vulnerabilities in the following products:

• MongoDB - version 8.3.0 to 8.3.1
• MongoDB - version 8.2.0 to 8.2.8
• MongoDB - version 8.0.0 to 8.0.22
• MongoDB - version 7.0.0 to 7.0.33
• MongoDB - version 6.0.0 to 6.0.27
• MongoDB - version 5.0.0 to 5.0.32

On 14 ^th May 2026, VMware published security advisories to address vulnerabilities in VMware Fusion - versions prior to 26H1.

Review the following advisories and apply the necessary updates:

• VMSA-2026-0003: VMware Fusion updates address privilege escalation vulnerability (CVE-2026-41702)
• Security Advisories - VMware Cloud Foundation

On 14^th May 2026, PostgreSQL published security advisories to address vulnerabilities in the following products:

• PostgreSQL - 14.x versions prior to 14.23
• PostgreSQL - 15.x versions prior to 15.18
• PostgreSQL - 16.x versions prior to 16.14
• PostgreSQL - 17.x versions prior to 17.10
• PostgreSQL - 18.x versions prior to 18.4

• PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 Released!
• PostgreSQL Security Information

On 14^th May 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Cisco Catalyst SD-WAN Release - versions 20.9 and prior
• Cisco Catalyst SD-WAN Release - versions 20.10 and prior
• Cisco Catalyst SD-WAN Release - versions 20.11 and prior
• Cisco Catalyst SD-WAN Release - versions 20.12 and prior
• Cisco Catalyst SD-WAN Release - versions 20.13 and prior
• Cisco Catalyst SD-WAN Release - versions 20.14 and prior
• Cisco Catalyst SD-WAN Release - versions 20.15 and prior
• Cisco Catalyst SD-WAN Release - versions 20.16 and prior
• Cisco Catalyst SD-WAN Release - versions 20.18 and prior
• Cisco Catalyst SD-WAN Release - versions 26.1 and prior

• Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
• Cisco Catalyst SD-WAN Manager Vulnerabilities
• Cisco Security Advisories
• CISA KEV: CVE-2026-20182

On 14^th May 2026, Tenable released security updates to address vulnerabilities in Tenable Network Monitor - versions prior to 6.5.4.

Review the following Tenable Security Advisory and apply the necessary updates:

• [R1] Tenable Network Monitor 6.5.4 Fixes Multiple Vulnerabilities
• Tenable Product Security Advisories

On 14^th May 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Cisco Secure Workload - version 3.9 and prior
• Cisco Secure Workload - versions prior to 3.10.8.3
• Cisco Secure Workload - versions prior to 4.0.3.17

Review the following advisories and apply the necessary updates: 

• Cisco Secure Workload Unauthorized API Access Vulnerability
• Cisco Security Advisories

On 12^th April 2026, HPE published a security advisory to address vulnerabilities in the following products:

• ArubaOS AOS-10.8.x.x - version 10.8.0.0 and prior
• ArubaOS AOS-10.7.x.x - version 10.7.2.2 and prior
• ArubaOS AOS-10.4.x.x - version 10.4.1.10 and prior
• ArubaOS AOS-8.13.x.x - version 8.13.1.1 and prior
• ArubaOS AOS-8.12.x.x - version 8.12.0.6 and prior
• ArubaOS AOS-8.10.x.x - version 8.10.0.21 and prior

Review the following HPE Security Advisory and apply the necessary updates:

• HPESBNW05048 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking Operating Systems AOS-8 & AOS-10.
• HPESBNW05049 rev.1 - HPE Aruba Networking AOS-8 Instant AP and AOS-10 AP, Multiple Vulnerabilities
• HPE Security Bulletin Library

On 12^th May 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 148.0.7778.167/168 (Windows/Mac) and 148.0.7778.167 (Linux).

Review the Google security bulletins and apply the required updates.

On 13^th May 2026, n8n published security updates to address vulnerabilities in the following products:

• n8n (Pagination Prototype Pollution) - multiple versions
• n8n (Dynamic Credential OAuth Endpoints) - multiple versions
• n8n (Source Control) - multiple versions
• n8n (XML Node Prototype Pollution) - multiple versions
• n8n (Git Node) - multiple versions

Review the provided n8n Security and apply the necessary updates.

On 12^th May 2026, Intel published security advisories to address vulnerabilities in Exim - version 4.97 to 4.99.2

Review the following advisories and apply the necessary updates:

• Exim Security Advisory for EXIM-Security-2026-05-01.1
• Download sites for Exim
• Exim Internet Mailer

On 13^th May 2026, F5 published Quarterly Security Notifications for multiple products. Included were updates for the following:

• BIG-IP (all modules) - multiple versions
• BIG-IP APM - multiple versions
• BIG-IP Advanced WAF/ASM - multiple versions
• BIG-IP BIG-IP Advanced WAF/ASM and BIG-IP DDoS Hybrid Defender - multiple versions
• BIG-IP Next CNF - multiple versions
• BIG-IP Next CNF - versions 2.0.0 to 2.0.2, versions 1.1.0 to 1.4.0
• BIG-IP Next CNF - versions 2.0.0 to 2.2.1, versions 1.1.0 to 1.4.1
• BIG-IP Next SPK - versions 2.0.0 to 2.0.2, versions 1.7.0 to 1.7.15
• BIG-IP Next SPK - versions 2.0.0 to 2.0.2, versions 1.7.0 to 1.7.16
• BIG-IP Next SPK - versions 2.0.0 to 2.0.3, versions 1.7.0 to 1.9.2
• BIG-IP Next for Kubernetes - version 2.0.0
• BIG-IP Next for Kubernetes - versions 2.0.0 to 2.1.0
• BIG-IP Next for Kubernetes - versions 2.0.0 to 2.1.1
• BIG-IP PEM - multiple versions
• BIG-IQ Centralized Management - version 8.4.0
• F5 DoS for NGINX - version 4.8.0
• F5 WAF for NGINX - versions 5.9.0 to 5.12.1
• NGINX App Protect DoS - versions 4.3.0 to 4.7.0
• NGINX App Protect WAF - versions 5.1.0 to 5.8.0, versions 4.9.0 to 4.16.0
• NGINX Gateway Fabric - versions 2.0.0 to 2.5.1, versions 1.3.0 to 1.6.2
• NGINX Ingress Controller - multiple versions
• NGINX Instance Manager - versions 2.16.0 to 2.21.1
• NGINX Open Source - versions 1.0.0 to 1.30.0, versions 0.6.27 to 0.9.7
• NGINX Plus - versions R32 to R36

• K000161019: NGINX ngx_http_rewrite_module vulnerability
• K000161021: NGINX ngx_http_ssl_module vulnerability CVE-2026-40701
• K000161027: NGINX ngx_http_scgi_module and ngx_http_uwsgi_module vulnerability
• K000161028: NGINX ngx_http_charset_module vulnerability
• Quarterly Security Notification (May 2026)

On 13^th May 2026, Palo Alto Networks published security advisories to address vulnerabilities in the following products:

• PAN-OS 12.1 - versions prior to 12.1.4-h5
• PAN-OS 12.1 - versions prior to 12.1.7
• PAN-OS 11.2 - multiple versions
• PAN-OS 11.1 - multiple versions
• PAN-OS 10.2 - multiple versions

Review the following advisories and apply the necessary updates:

• CVE-2026-0265 PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled
• CVE-2026-0264 PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution
• CVE-2026-0263 PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing
• Palo Alto Network Security Advisories

On 13^th May 2026, Drupal published security advisories to address vulnerabilities in Date iCal - versions prior to 4.0.15.

Review the following Drupal Security Advisory and apply the necessary updates.

• Date iCal - Critical - Information disclosure - SA-CONTRIB-2026-03
• Drupal Security Advisories

On 13^th May 2026, cPanel published security advisories to address vulnerabilities in cPanel & WebHost Manager (WHM) software – versions prior to 11.86.0.44, 11.94.0.31, 11.102.0.42, 11.110.0.118, 11.118.0.67, 11.124.0.38, 11.126.0.59, 11.130.0.23, 11.132.0.32, 11.134.0.26, 11.136.0.10 and WP Squared 11.136.1.12.

Review the cPanel Security Advisory and apply the necessary updates.

On 12^th May 2026, HPE published a security advisory to address vulnerabilities in HPE Telco Intelligent Assurance - version 4.2.14.

Review the following HPE Security Advisory and apply the necessary updates:

• HPESBNW05045 rev.1 - Telco Intelligent Assurance, Multiple Vulnerabilities
• HPE Security Bulletin Library

On 13^th May 2026, Apple published a security update to address vulnerabilities in Safari - versions prior to 26.5.

Review the provided web links and apply the necessary updates.

• About the security content of Safari 26.5
• Apple security releases

On 12^th May 2026, SAP published security advisories to address vulnerabilities in multiple products. Included were updates for the following:

• SAP S/4HANA (SAP Enterprise Search for ABAP) - versions SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758 and SAP_BASIS 816
• SAP Commerce cloud - versions HY_COM 2205, COM_CLOUD 2211 and 2211-JDK21
• SAP Forecasting and Replenishment - versions SCM 702, 712, 713 and 714
• SAP NetWeaver Application Server for ABAP and ABAP Platform – versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758 and SAP_BASIS 816
• SAP S/4HANA Condition Maintenance - versions S4CORE 102, 103, 104, 105, 106, 107, 108 and 109
• Business Server Pages Application (TAF_APPLAUNCHER) - versions ST-PI 740 and 758
• SAP BusinessObjects Business Intelligence Platform - versions ENTERPRISE 430, 2025 and 2027
• SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard) - versions SEM-BW 605, 700, 736, 746, 747, 748, 749 and 800
• SAP Commerce Cloud (Apache Log4j) - versions HY_COM 2205, COM_CLOUD 2211 and 2211-JDK21
• SAPUI5 (Search UI) - versions SAPUI5 1.108, 1.120, 1.136, 1.142, 1.71, 1.84 and 1.96
• SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) - versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816 and SAP_BASIS 918
• SAP Financial Consolidation - version FINANCE 1010
• SAP Incentive and Commission Management - versions SAP_APPL 618, S4CORE 102, 103, 104, 105, 106, 107, 108, 109, EA-APPL 600, 604, 605, 606 and 617
• SAP Application Server ABAP for SAP NetWeaver and ABAP Platform - versions SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758 and SAP_BASIS 816
• SAP HANA Deployment Infrastructure (HDI) deploy library - version XS_HDI_DEPLOYER 1.00

Review the SAP Security Patch Day - May 2026 and apply the necessary updates.

On 12^th May 2026, Ivanti published security advisories to address vulnerabilities in the following products:

• Ivanti Xtraction - version 2026.1 and prior
• Ivanti Endpoint Manager (EPM) - version 2024 SU5 and prior
• Ivanti Virtual Traffic Manager (vTM) - version 22.9r3 and prior
• Ivanti Secure Access Client (Windows) - version 22.8R5 and prior

Review the following advisories and apply the necessary updates:

• Security Advisory - Ivanti Xtraction (CVE-2026-8043)
• Security Advisory Ivanti Endpoint Manager (EPM) May 2026
• May 2026 Security Advisory Ivanti Virtual Traffic Manager (vTM) (CVE-2026-8051)
• May 2026 Security Advisory Ivanti Secure Access Client (CVE-2026-7431, CVE-2026-7432)
• Ivanti Security Advisories

On 12^th May 2026, Mozilla published security advisories to address vulnerabilities in the Firefox - versions prior to 150.0.3

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-45
• Mozilla Security Advisories

On 12^th May 2026, Adobe published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• Adobe Premiere - version 26.0.2 and prior
• Adobe Premiere Pro - version 25.6.4 and prior
• Adobe Media Encoder - version 25.6.4 and prior, version 26.0.2 and prior
• Adobe After Effects - version 25.6.4 and prior, version 26.0 and prior
• Adobe Commerce - multiple versions
• Adobe Commerce B2B - multiple versions
• Magento Open Source - multiple versions
• Adobe Connect Desktop Application  - version 2025.9.15 (Windows) and version 2025.8.157 (macOS)
• Illustrator 2025 - version 29.8.6 and prior
• Illustrator 2026 - version 30.3 and prior
• Adobe Substance 3D Designer - version 15.1.0 and prior
• Content Authenticity JS SDK - version @contentauth/c2pa-web@0.7.0
• Content Authenticity Rust SDK - version c2pa-v0.78.2
• Adobe Substance 3D Sampler - version 5.1.3 and prior
• Adobe Substance 3D Painter - version 12.0.2 and prior

Review the Adobe Security Advisories and apply the necessary updates.

On 12^th May 2026, Intel published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• Display Virtualization for Windows OS driver software - versions prior to 2119
• Intel EMA software - versions prior to 1.14.5
• AI Playground software - versions prior to 3.0.0 alpha
• Intel Vision software - all versions

Review the following advisories and apply the necessary updates:

• Display Virtualization for Windows OS Advisory
• Intel EMA Software Advisory
• AI Playground Software Advisory
• Intel Vision Software Advisory
• Intel Product Security Center Advisories

On 12^th May 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• FortiAuthenticator 8.0 - version 8.0.2
• FortiAuthenticator 8.0 - version 8.0.0
• FortiAuthenticator 6.6 - versions 6.6.0 to 6.6.8
• FortiAuthenticator 6.5 - versions 6.5.0 to 6.5.6
• FortiOS 7.6 - versions 7.6.0 to 7.6.3
• FortiOS 7.4 - versions 7.4.0 to 7.4.8
• FortiOS 7.2 - versions 7.2.0 to 7.2.11
• FortiSandbox 5.0 - versions 5.0.0 to 5.0.1
• FortiSandbox 4.4 - versions 4.4.0 to 4.4.8
• FortiSandbox Cloud 24 - all versions
• FortiSandbox Cloud 23 - all versions
• FortiSandbox Cloud 5.0 - versions 5.0.2 to 5.0.5
• FortiSandbox PaaS 23.4 - 23.4 all versions
• FortiSandbox PaaS 23.3 - 23.3 all versions
• FortiSandbox PaaS 23.1 - 23.1 all versions
• FortiSandbox PaaS 22.2 - 22.2 all versions
• FortiSandbox PaaS 22.1 - 22.1 all versions
• FortiSandbox PaaS 21.4 - 21.4 all versions
• FortiSandbox PaaS 21.3 - 21.3 all versions
• FortiSandbox PaaS 5.0 - versions 5.0.0 to 5.0.1
• FortiSandbox PaaS 4.4 - versions 4.4.5 to 4.4.8

Review the following advisories and apply the necessary updates:

• Improper access control on API endpoints
• Incorrect global authorization
• Out-of-bounds access in CAPWAP daemon
• Fortinet PSIRT Advisories

On 12^th May 2026, Intel published security advisories to address vulnerabilities in multiple products.

Review the provided AMD Product Security and perform the suggested mitigations.

On 12^th May 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• Azure AI Foundry
• Azure Cloud Shell
• Azure Connected Machine Agent
• Azure DevOps
• Azure Logic Apps
• Azure Machine Learning
• Azure Managed Instance for Apache Cassandra
• Azure Monitor Action Group notification system
• Azure Monitor Agent
• Azure Monitor Agent Metrics Extension
• Azure SDK for Java
• Copilot Chat (Microsoft Edge)
• Dynamics 365 Customer Insights
• M365 Copilot for Desktop
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 3.5 AND 4.7.2
• Microsoft .NET Framework 3.5 AND 4.8
• Microsoft .NET Framework 3.5 AND 4.8.1
• Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
• Microsoft .NET Framework 4.8
• Microsoft 365
• Microsoft 365 Copilot for Android
• Microsoft 365 Copilot's Business Chat
• Microsoft Confluence SAML SSO plugin
• Microsoft Data Formulator
• Microsoft Dynamics 365
• Microsoft Dynamics 365 Business Central
• Microsoft Edge (Chromium-based)
• Microsoft Enterprise Security Token Service (ESTS)
• Microsoft Excel 2016
• Microsoft Excel for Android
• Microsoft JIRA SAML SSO plugin
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Office for Android
• Microsoft Outlook for iOS
• Microsoft Partner Center
• Microsoft PowerPoint for Android
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Teams
• Microsoft Teams for Android
• Microsoft Visual Studio 2017
• Microsoft Visual Studio 2019
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Word 2016
• Microsoft Word for Android
• Office Online Server
• Power Automate for Desktop
• Visual Studio Code
• Visual Studio Code - Live Preview extension
• Windows 10
• Windows 11
• Windows Admin Center
• Windows Admin Center in Azure Portal
• Windows Server 2012
• Windows Server 2016
• Windows Server 2019
• Windows Server 2025

Review the Microsoft Security Updates and apply the necessary updates (Security Update Guide).

Between 4^th and 10^th May 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• Aspera Faspex 5 - versions 5.0.0 to 5.0.15.1
• Automation Assets in IBM Cloud Pak for Integration (CP4I) - multiple versions
• Automation Assets in IBM Cloud Pak for Integration - multiple versions
• IBM App Connect Enterprise Certified Containers Operands - multiple versions
• IBM App Connect Enterprise - versions 12.0.1.0 to 12.0.12.25
• IBM App Connect Enterprise - versions 13.0.1.0 to 13.0.7.1
• IBM App Connect Operator - multiple versions
• IBM Automation Decision Services - multiple versions
• IBM Business Automation Insights - multiple versions
• IBM CICS TX Advanced - version 10.1
• IBM Cloud Pak for Business Automation - multiple versions
• IBM Content Navigator - multiple versions
• IBM Edge Data Collector - versions 9.1, 9.0 and 8.11
• IBM Engineering AI Hub - versions 1.0.0 and 1.1.0
• IBM Industry Solutions Workbench - multiple versions
• IBM MQ - multiple versions and models
• IBM Maximo Application Suite - IoT Component - multiple versions
• IBM Maximo Application Suite - Optimizer Component - all versions
• IBM Maximo Application Suite - Visual Inspection Component - multiple versions
• IBM Netezza Analytics for NPS - versions 11.2.0.0 to 11.2.29
• IBM Observability with Instana (OnPrem) - versions Build 1.0.285 to 1.0.315
• IBM Quantum Safe Explorer - versions 2.2.2 to 2.3.0
• IBM Quantum Safe Remediator - versions 1.0.1 to 1.1.1
• IBM SOAR QRadar Plugin App - version 3.1
• IBM SPSS Statistics Client and Server - multiple versions
• IBM TXSeries for Multiplatforms - multiple versions
• IBM watsonx Orchestrate Developer Edition - versions 1.4.0 to 2.6.0
• Platform Navigator in IBM Cloud Pak for Integration (CP4I) - multiple versions
• Platform Navigator in IBM Cloud Pak for Integration - multiple versions
• PowerVC - versions 2.2.1.2, 2.3.0, 2.3.1 and 2.3.2
• QRadar AI Assistant - versions 1.0.0 to 1.4.0

Review the IBM Security Advisory and apply the necessary updates.

Between 4^th and 11^th May 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• PowerScale A300/A3000/H700/H7000 - versions prior to 13.2.3
• Elastic Cloud Storage (ECS) - versions 3.8.1.0 to 3.8.1.7
• ObjectScale - versions prior to 4.3.0.0

Review the following advisories and apply the necessary updates:

• DSA-2026-127: Security Update for Dell PowerScale OneFS Multiple Third-Party Component Vulnerabilities
• DSA-2026-019: Security update for Dell ECS and ObjectScale Multiple Vulnerabilities
• Dell Security advisories and notices

Between 4^th and 10^th May 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

 Ubuntu 20.04 LTS

• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10

Review the following advisories and apply the necessary updates:

• USN-8257-1: Linux kernel (Raspberry Pi) vulnerabilities (25.01)
• USN-8255-1: Linux kernel vulnerabilities (22.04, 20.04)
• USN-8258-1: Linux kernel (Azure) vulnerabilities
• Ubuntu Security Notices

Between 4^th and 10^th May 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

On 8^th May 2026, Spring published security advisories to address vulnerabilities in the following products:

• Spring AI - 1.0.x versions prior to 1.0.7
• Spring AI - 1.1.x versions prior to 1.1.6

Review the provided web links and apply the necessary updates.

• CVE-2026-41705: Expression injection in MilvusVectorStore doDelete allows data destruction
• CVE-2026-41713: Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor
• CVE-2026-41712: ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage
• Spring Security Advisories

On 11^th May 2026, JetBrains published security advisories to address JetBrains TeamCity - versions prior to 2026.1 and 2025.11.5.

Review the JetBrains - Fixed security issues and apply the necessary updates.

On 11^th May 2026, Apple published a security update to address vulnerabilities in the following products:

• iOS - versions prior to 26.5
• iPadOS - versions prior to 26.5
• iOS - versions prior to 18.7.9
• iPadOS - versions prior to 18.7.9
• iPadOS - versions prior to 17.7.11
• iOS - versions prior to 16.7.16
• iPadOS - versions prior to 16.7.16
• iOS - versions prior to 15.8.8
• iPadOS - versions prior to 15.8.8
• macOS Tahoe - versions prior to 26.5
• macOS Sequoia - versions prior to 15.7.7
• macOS Sonoma - versions prior to 14.8.7
• tvOS - versions prior to 26.5
• watchOS - versions prior to 26.5
• visionOS - versions prior to 26.5

Review the provided Apple Security Advisory and apply the necessary updates.

On 8^th May 2026, VMware published security advisories to address vulnerabilities in VMware Tanzu RabbitMQ on Kubernetes, including versions prior to 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15.

Review the following advisories and apply the necessary updates:

• Product Release Advisory - VMware Tanzu RabbitMQ on Kubernetes 4.3.0, 4.2.6, 4.1.11, 4.0.20, 3.13.15
• Security Advisories - Tanzu

On 7^th May 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 148.0.3967.54.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 8^th May 2026, cPanel published security advisories to address vulnerabilities in cPanel & WebHost Manager (WHM) software - versions prior to 11.136.0.9, 11.134.0.25, 11.132.0.31, 11.130.0.22, 11.126.0.58, 11.124.0.37, 11.118.0.66, 11.110.0.116, 11.110.0.117, 11.102.0.41, 11.94.0.30, 11.86.0.43 and WP Squared 11.136.1.10.

Review the following advisories and apply the necessary updates:

• Security: CVE-2026-29201 - cPanel & WHM / WP2 Security Update - May 08, 2026
• Security: CVE-2026-29202 - cPanel & WHM / WP2 Security Update - May 08, 2026
• Security: CVE-2026-29203 - cPanel & WHM / WP2 Security Update - May 08, 2026
• cPanel Support Topics

On 4^th May 2026, Spring published security advisories to address vulnerabilities in the VM2 Node.js sandboxing library - versions prior to 3.11.2.

Review the provided web links and apply the necessary updates.

• VM2 v3.11.2
• VM2 security advisories

On 7^th May 2026, Mozilla published security advisories to address vulnerabilities in the following products:

• Firefox - versions prior to 150.0.2
• Firefox ESR - versions prior to 140.10.2
• Firefox ESR - versions prior to 115.35.2

• Mozilla Foundation Security Advisory 2026-40
• Mozilla Foundation Security Advisory 2026-41
• Mozilla Foundation Security Advisory 2026-42
• Mozilla Security Advisories

Between 6^th and 7^th May 2026, VMware published security advisories to address vulnerabilities in the following products:

• Tanzu Greenplum Command Center - versions prior to 6.17.0
• Tanzu Greenplum Command Center - versions prior to 7.7.0
• Tanzu Greenplum Data Copy Utility - versions prior to 2.9.3
• Tanzu for MySQL on Kubernetes - versions prior to 2.0.3
• Tanzu Greenplum Streaming Server for Kubernetes - versions prior to 1.3.0
• Tanzu Greenplum Streaming Server - versions prior to 2.3.0
• Tanzu Greenplum Streaming on Kubernetes - versions prior to 1.1.0
• Tanzu Greenplum Text - versions prior to 4.0.0
• Tanzu for Valkey on Kubernetes - versions prior to 3.3.4
• Tanzu for Valkey on Kubernetes - versions prior to 3.4.0

On 7^th May 2026, Ivanti published security advisories to address vulnerabilities in the following products:

• Ivanti Endpoint Manager Mobile (EPMM) - versions prior to 12.6.1.1
• Ivanti Endpoint Manager Mobile (EPMM) - versions prior to 12.7.0.1
• Ivanti Endpoint Manager Mobile (EPMM) - versions prior to 12.8.0.1
• Ivanti has indicated that CVE-2026-6973 has been exploited.

• Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (Multiple CVEs)
• Ivanti Security Advisories
• CISA KEV: CVE-2026-6973

On 6^th May 2026, Spring published security advisories to address vulnerabilities in Spring Cloud Config - multiple versions

Review the provided web links and apply the necessary updates.

• CVE-2026-40981: Spring Cloud Config Clients Can Access Secrets From Any Project The Config Server Has Access To On Google Secrets Manager Server Has Access To On Google Secrets Manager
• CVE-2026-40982: Directory Traversal with spring-cloud-config-server
• CVE-2026-41002: Spring Cloud Config Server Susceptible To TOCTOU Attack
• Spring Security Advisories

On 5^th May 2026, Palo Alto Networks published security advisories to address vulnerabilities in the following products:

• PAN-OS 12.1 - versions prior to 12.1.4-h5
• PAN-OS 12.1 - versions prior to 12.1.7
• PAN-OS 11.2 - multiple versions
• PAN-OS 11.1 - multiple versions
• PAN-OS 10.2 - multiple versions

Palo Alto has received reports that CVE-2026-0300 is being actively exploited.

Review the following advisories and apply the necessary updates:

• CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
• Palo Alto Network Security Advisories

On 5^th May 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 148.0.7778.96/97 (Windows/Mac) and 148.0.7778.96 (Linux).