As of 13^th August 2026, Zimbra is affected by vulnerabilities in Zimbra Collaboration - Prior to 10.1.20.

Review the provided web links and apply any necessary updates as they become available.

• Zimbra Security Advisories - Zimbra: Tech Center
• Zimbra Responsible Disclosure Policy - Zimbra: Tech Center
• Zimbra: Blog - All Things Zimbra

As of 13^th August 2026, FreePBX is affected by vulnerabilities in the following products:

• backup
  • After or equal to 17.0.5.34, Prior to 17.0.11
• framework
  • After or equal to 17.0.1, Prior to 17.0.30
  • Prior to 16.0.47
• missedcall
  • After or equal to 17.0.1, Prior to 17.0.4
  • Prior to 16.0.11
• music
  • Prior to 17.0.7
• tts
  • After or equal to 17.0.1, Prior to 17.0.5.4
  • Prior to 16.0.6
• ucp
  • Prior to 17.0.9

Review the FreePBX Security Advisories and apply the necessary updates.

As of 11^th August 2026, AMD is affected by vulnerabilities in the following products:

• AMD Power Design Manager (PDM) Software Installer for Windows
  • all except 2026.1
• AMD Power Design Manager (PDM) Software Un-Installer
  • all except 2026.1
• AMD Ryzen Master
  • all except 3.0.0.4199
  • all except 3.1.1.5502
• AMD Ryzen Master (AMD Ryzen 3000 Series Processors)
  • all except 2.14.3.5040
• AMD Ryzen Master Monitoring SDK
  • all except 3.1.1.5478
• AMD Ryzen Master SDK
  • all except 3.0.1.4732
• Vitis Libraries - Security Module
  • all except 2026.1
• Vitis Embedded Single File Download (SFD) for Windows
  • all except 2026.1
• Vitis Unified Installer for FPGAs & Adaptive SoCs in Windows
  • all except 2026.1

Review the provided web links and apply any necessary updates as they become available.

• Vitis Vulnerabilities
• AMD Power Design Manager (PDM) Vulnerabilities
• AMD Ryzen Master Vulnerability
• AMD Product Security

As of 12^th August 2026, GitLab is affected by vulnerabilities in the following product:

• GitLab
  • Prior to 19.0.6
  • Prior to 19.1.4
  • Prior to 19.2.2

Review the GitLab Patch Release: 19.2.2, 19.1.4, 19.0.6 | GitLab Docs and apply any necessary updates.

As of 12^th August 2026, WebPros is affected by a vulnerability in the following product:

• Plesk (Windows/Linux)
  • Prior to 18.0.79.6
  • Prior to 18.0.80.2

Review the Vulnerability CVE-2026-64639: Privilege Escalation via Database Cloning in Plesk and apply the necessary updates.

On 11^th August 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 151.0.7922.137/.138 (Windows/Mac), and 151.0.7922.137 (Linux).

 Review the Google security bulletins and apply the required updates.

As of 11^th August 2026, Cisco is affected by a vulnerability in the following products:

• Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
  • multiple versions
• Cisco Secure Firewall Threat Defense (FTD) Software
  • multiple versions

On 11^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20349 to their Known Exploited Vulnerabilities (KEV) Database.

Review the following provided web links and apply any necessary updates as they become available.

• Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
• Cisco Security Advisories
• CISA KEV: CVE-2026-20349

As of 11^th August 2026, Adobe is affected by vulnerabilities in the following products:

• Adobe Campaign Classic
  • Prior to or equal to ACC v7: 7.4.3 build 9399
• Adobe Commerce
  • Prior to or equal to 2.4.9-2026-jul, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug and 2.4.4-2026-aug
• Adobe Commerce B2B
  • Prior to or equal to 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul and 1.3.3-2026-jul
• ColdFusion 2023
  • Prior to or equal to 2023.0.22
• ColdFusion 2025
  • Prior to or equal to 2025.0.11
• Content Credentials Command-Line Tool
  • Prior to or equal to c2patool-v0.27.5
• Content Credentials JS SDK
  • Prior to or equal to @contentauth/c2pa-web@0.12.0
• Content Credentials Rust SDK
  • Prior to or equal to c2pa-v0.90.5
• Lightroom Classic
  • Prior to or equal to 15.4, 15.4.1, 15.3, 15.3.1, 15.2, 15.2.1
• Magento Open Source
  • Prior to or equal to 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul and 2.4.6-2026-jul

Review the Adobe Product Security Incident Response Team and apply any necessary updates as they become available.

As of 11^th August 2026, SonicWall published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Email Security 10.0.35.8405 and earlier versions
• GMS 9.5.1 and earlier versions

Review the following SonicWall Security Advisory and apply the necessary updates:

• Security Advisory
• Security Advisory (1)
• Security Advisory (2)

As of 11^th August 2026, MongoDB is affected by vulnerabilities in the following products:

• MongoDB Driver
  • Prior to 5.9.2
• MongoDB Server
  • Prior to 7.0.40
  • Prior to 8.0.29
  • Prior to 8.2.13
  • Prior to 8.3.8
  • Prior to 9.0.0-rc2

Review the provided web links and apply any necessary updates as they become available.

• [SERVER-130264] Intra-cluster SASL mechanism allow list missing in egress connection setup, enabling PLAIN downgrade and cleartext keyfile disclosure - MongoDB Jira
• [JAVA-6266] Mask proxy password in ProxySettings toString - MongoDB Jira
• Alerts | MongoDB

As of 12^th August 2026, Fortinet is affected by a vulnerability in the following products:

• FortiClientWindows
  • Prior to or equal to 7.2.11
  • Prior to or equal to 7.4.3
• FortiManager
  • Prior to or equal to 7.61
  • Prior to or equal to 7.4.5
  • Prior to or equal to 7.2.9
• FortiManager Cloud
  • Prior to or equal to 7.61
  • Prior to or equal to 7.4.5
  • Prior to or equal to 7.2.9
• FortiWeb
  • Prior to or equal to 8.0.2
  • Prior to or equal to 7.6.6
  • Prior to or equal to 7.4.11
  • Prior to or equal to 7.2.12

Review the provided web links and apply any necessary updates as they become available.

• PSIRT | FortiGuard Labs
• PSIRT | FortiGuard Labs
• PSIRT | FortiGuard Labs
• Fortinet PSIRT Advisories

As of 11^th August 2026, Grafana is affected by a vulnerability in the following products:

• Grafana MCP Server
  • Prior to or equal to 1.0.0
• mcp-grafana
  • Prior to or equal to 1.0.0

Review the provided web link and apply any necessary updates as they become available.

• Grafana: The open and composable observability platform | Grafana Labs
• CVE-2026-19516 CVE Record

As of 11th August 2026, SAP is affected by vulnerabilities in the following products: SAP Commerce Cloud (Data Hub Adapter) Versions COM_CLOUD 2211 and 2211-JDK21 SAP Manufacturing Integration and Intelligence Versions XMII 15.4, 15.5, MII_ADMIN 15.4 and 15.5 SAP NetWeaver and ABAP Platform Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.22EXT2, 7.22EXT3, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16 9.18, 9.19, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16, 9.18 and 9.19 SAP Manufacturing Integration and Intelligence Version MII 15.4, 15.5 SAP Change and Transport System Attach Tool (ctsattach) Version CTS_UPLOAD_CLT 1 SAP ABAP Developer Tools Versions AP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816 and SAP_BASIS 918, SAP_BASIS 920 SAP Commerce Cloud Versions OM_CLOUD 2211, 2211-JDK21 and DHUB_CLOUD 2211, 2211-JDK21 SAP BusinessObjects Business Intelligence Platform (Central Management Server) Versions AP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816, SAP_BASIS 918, SAP_BASIS 920, ENTERPRISE 430, 2025 and 2027 SAP Manufacturing Integration and Intelligence Versions MII 15.4 and 15.5 Review the SAP Security Patch Day - August 2026 and apply the necessary updates.

As of 11^th August 2026, SAP is affected by vulnerabilities in the following products:

• SAP Commerce Cloud (Data Hub Adapter)
  • Versions COM-CLOUD 2211 and 2211-JDK21
• SAP Manufacturing Integration and Intelligence
  • Versions XMII 15.4, 15.5, MII-ADMIN 15.4 and 15.5
• SAP NetWeaver and ABAP Platform
  • Versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.22EXT2, 7.22EXT3, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16 9.18, 9.19, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16, 9.18 and 9.19
• SAP Manufacturing Integration and Intelligence
  • Version MII 15.4, 15.5
• SAP Change and Transport System Attach Tool (ctsattach)
  • Version CTS-UPLOAD-CLT 1
• SAP ABAP Developer Tools
  • Versions AP-BASIS 750, SAP-BASIS 751, SAP-BASIS 752, SAP-BASIS 753, SAP-BASIS 754, SAP-BASIS 755, SAP-BASIS 756, SAP-BASIS 757, SAP-BASIS 758, SAP-BASIS 816 and SAP-BASIS 918, SAP-BASIS 920
• SAP Commerce Cloud
  • Versions OM-CLOUD 2211, 2211-JDK21 and DHUB-CLOUD 2211, 2211-JDK21
• SAP BusinessObjects Business Intelligence Platform (Central Management Server)
  • Versions AP-BASIS 750, SAP-BASIS 751, SAP-BASIS 752, SAP-BASIS 753, SAP-BASIS 754, SAP-BASIS 755, SAP-BASIS 756, SAP-BASIS 757, SAP-BASIS 758, SAP-BASIS 816, SAP-BASIS 918, SAP-BASIS 920, ENTERPRISE 430, 2025 and 2027
• SAP Manufacturing Integration and Intelligence
  • Versions MII 15.4 and 15.5

Review the SAP Security Patch Day - August 2026 and apply the necessary updates.

As of 11^th August 2026, Rapid7 is affected by a vulnerability in Velociraptor prior to 0.77.2.

Review the CVE-2026-18972 Velociraptor authenticated identity-spoofing … and apply the necessary updates.

As of 10^th August 2026, AMD is affected by vulnerabilities in the following products:

• AMD EPYC Series Processors
• AMD EPYC Embedded Series Processors

Review the provided web links and apply any necessary updates as they become available.

• Extracting VM Secrets through Power Side Channels on AMD SEV-ES and SEV-SNP
• AMD Product Security

As of 11^th August 2026, Microsoft is affected by vulnerabilities in the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• App Installer
• Application Insights Profiler
• Azure Active Directory
• Azure Confidential Ledger
• Azure CycleCloud
• Azure Kubernetes Service
• Azure Logic Apps
• Azure Monitor Agent Linux Extension
• Azure SQL Database
• Azure SQL Managed Instance
• Azure SRE Agent
• Azure Service Bus
• Azure Storage Explorer
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
• Microsoft .NET Framework 3.5 AND 4.7.2
• Microsoft .NET Framework 3.5 AND 4.8
• Microsoft .NET Framework 3.5 AND 4.8.1
• Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
• Microsoft .NET Framework 4.8
• Microsoft .NET Framework 4.8.1
• Microsoft 365 Admin Center
• Microsoft 365 Apps for Enterprise
• Microsoft Access 2016
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics 365 (on-premises)
• Microsoft Dynamics 365 Business Central 2024
• Microsoft Dynamics 365 Business Central 2026
• Microsoft Dynamics 365 Business Central Release Wave 1 2025
• Microsoft Dynamics 365 Business Central Release Wave 2 2025
• Microsoft Entra Connect
• Microsoft Entra ID
• Microsoft Entra Provisioning Service
• Microsoft Excel 2016
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2019
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365 for Mac
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Outlook 2016
• Microsoft Planetary Computer Pro (GeoCatalog)
• Microsoft Power Apps
• Microsoft PowerPoint 2016
• Microsoft Purview eDiscovery
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Online
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Teams
• Microsoft Teams for Android
• Microsoft Teams for iOS
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Visual Studio Code CoPilot Chat Extension
• Microsoft Word 2016
• OneDrive for MacOS
• Power BI Report Server
• PowerShell 7.4
• PowerShell 7.5
• PowerShell 7.6
• Python extension for Visual Studio Code
• Visual Studio Code
• Windows 10
• Windows 11
• Windows App Client for Windows Desktop
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025

Review the Microsoft Security Updates and apply the necessary updates (Security Update Guide).

On 11^th August 2026, Ivanti published security advisories to address vulnerabilities in Ivanti Endpoint Manager – version prior to or equal to 2024 SU6.

Review the Ivanti Innovators Hub advisories and apply the necessary updates:

As of 7^th August 2026, Dell is affected by vulnerabilities in the following products:

·       Dell OpenManage Server Administrator Managed Node (Patch) for Windows

o   Prior to 11.1.0.2

·       Dell OpenManage Server Administrator Managed Node for RHEL 8.10

o   Prior to 11.1.0.2

·       Dell OpenManage Server Administrator Managed Node for RHEL 9.4

o   Prior to 11.1.0.2

·       Dell OpenManage Server Administrator Managed Node for SLES 15

o   Prior to 11.1.0.2

·       OpenManage Server Administrator Managed Node (Patch) for Windows

o   Prior to 11.1.0.2

·       RVTools

o   Prior to 4.8.1

·       Virtual Storage Integrator for VMware vSphere Client

o   Prior to 10.11.1.0

Review the provided web links and apply any necessary updates as they become available.

• DSA-2026-335: Security Update for Dell Virtual Storage Integrator for VMware vSphere Client Multiple Vulnerabilities
• DSA-2026-326: Security Update for Dell OpenManage Server Administrator (OMSA) Network Access Vulnerabilities
• DSA-2026-325: Security Update for Dell RVtools Vulnerability
• Security Advisories, Notices and Resources

As of 7^th August 2026, IBM is affected by vulnerabilities in the following products:

• Application Gateway Operator
  • Prior to or equal to 26.06
• Big SQL on IBM Cloud Pak for Data
  • Version Big SQL 7.7 on Cloud Pak for Data 5.0
• Big SQL on IBM Software Hub
  • Multiple versions
• Business Automation Workflow containers and traditional
  • 26.0.0
  • Prior to or equal to 24.0.0 Interim Fix 009
  • Prior to or equal to 24.0.1 Interim Fix 007
  • Prior to or equal to 25.0.0 Interim Fix 005
• Cloud APM, Advanced/Base Private
  • Prior to or equal to 8.1.4
• Cloud Pak For Business Automation
  • 24.0.0
  • 24.0.1
  • 25.0.0
  • 26.0.0
• IBM Event Streams version
  • 13.0.1
• Langflow OSS
  • Prior to or equal to 1.10.3
• Maximo Application Suite
  • 9.0
  • 9.1
  • 9.2
• IBM Netezza Appliance
  • 1.0.2.0
• Operational Decision Manager
  • Multiple versions
• PowerVC
  • Multiple versions
• Process Automation Manager Open Edition Starter Kit for Banking
  • Prior to or equal to 9.4.1
• SevOne Network Performance Management (Data Insight)
  • Prior to or equal to 8.2.2
• QRadar
  • Prior to or equal to 7.5.0 UP 15 Interim Fix 005
  • Prior to or equal to 7.6.0.1
• Security Verify Information Queue
  • Multiple versions
• Storage Protect Operations Center
  • Versions prior or equal to 8.1 and 8.2
• webMethods Managed File Transfer (on-prem)
  • Prior to or equal to 11.1 and 12.1
• WebSphere Application Server
  • 8.5
  • 9.0
• WebSphere Application Server - Liberty
  • Continuous delivery

Review the provided web link and apply the necessary updates.

• IBM Product Security Incident Response

As of 7^th August 2026, WebPros is affected by a vulnerability in the following product:

• Plesk Obsidian
  • Prior to 18.0.80.1 and 18.0.79.5

Review the CVE-2026-64636 Vulnerability in Plesk: blind SQL injection and apply the necessary updates.

As of 7^th August 2026, HashiCorp is affected by vulnerabilities in the following products:

• Consul Community Edition
  • Prior to 2.0.3
• Consul Enterprise
  • Prior to 2.0.3
  • Prior to 1.22.11
  • Prior to 1.21.17

Review the provided web links and apply any necessary updates as they become available.

• HCSEC-2026-25 - Multiple vulnerabilities impacting HashiCorp Consul - Security - HashiCorp Discuss
• Security - HashiCorp Discuss

As of 7^th August 2026, WordPress published a security advisory to address vulnerabilities in WordPress prior to 7.0.3.

Open-source reporting indicates that CVE-2026-64638 is being exploited in the wild.

Review the provided web link and apply any necessary updates as they become available.

• WordPress 7.0.3 release - WordPress News

On 9^th August 2026, Roundcube is affected by vulnerabilities in the following product:

• Roundcube Webmail
  • prior to 1.6.18
  • prior to 1.7.3

Review the provided web links and apply the necessary updates.

• Security updates 1.6.18 and 1.7.3 released
• Roundcube Webmail 1.6.18
• Roundcube Webmail 1.7.3
• Roundcube Open Source Webmail Software

As of 7^th August 2026, Cisco is affected by vulnerabilities in the following product:

• Secure Endpoint Connector for Linux
• Secure Endpoint Connector for Mac
• Secure Endpoint Connector for Windows
• Cisco Secure Endpoint Private Cloud
  • Prior to 8.4.5.30483

Review the provided web link and apply any necessary updates as they become available.

• ClamAV Vulnerabilities Affecting Cisco Products: August 2026
• Cisco Security Advisories

As of 3^rd August 2026, Qualcomm published a security bulletin to address vulnerabilities affecting Qualcomm products.

Review the Qualcomm Security Bulletin - August and apply the necessary updates.

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI), in collaboration with U.S. government and international partners, released a joint Cybersecurity Advisory, Gunra Ransomware, part of an ongoing series detailing ransomware variants and threat actors. This joint advisory provides technical details on Gunra activity, along with detection and mitigation guidance to help protect at-risk organizations across government and critical infrastructure.

Gunra first emerged in April 2025 and expanded to a formal ransomware-as-a-service (RaaS) affiliate program advertised on dark web forums. Gunra actors use a double-extortion model, meaning actors both encrypt and exfiltrate sensitive data to create two forms of leverage for collecting ransom payments. They demand ransom via a Tor-based negotiation portal and threaten to publish stolen data on their dedicated leak site (DLS) if victim organizations do not pay within 5 to 7 days. As part of the 2026 expansion, Gunra actors have adopted branding aliases (including Golden Community) and further commercialized by actively recruiting penetration testers and ethical hackers as initial access brokers in exchange for a share of ransom profits. They have also demonstrated the ability to disable backup features and, in one instance, prevent restoration by deleting backup and archived data stored at both a primary data center and a disaster recovery center. Victim organizations listed on Gunra's DLS site come from multiple sectors worldwide.

CISA, the FBI, and authoring agencies urge organizations to implement the advisory's mitigations, including the following key actions:

• Prioritize patching in internet-facing systems, including virtual private network (VPN) gateways and remote desktop protocol (RDP)-exposed infrastructure.
• Implement and test offline, immutable backups stored in a physically separate, segmented location to ensure recoverability without ransom payment.
• Segment networks to restrict lateral movement from an initially compromised device to other systems in the organization.

Read the full advisory for more information on how to protect your organization from Gunra.

On 9^th August 2026, BDNCIRT issued an Advisory regarding The Gentlemen Ransomware: A Rapidly Scaling RaaS Threat Targeting Bangladesh.

Review the advisory about The Gentlemen Ransomware: A Rapidly Scaling RaaS Threat Targeting Bangladesh and take the necessary action.

On 6^th August 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 151.0.7922.108/.109 (Windows/Mac), and 151.0.7922.108 (Linux).

Review the Google security bulletins and apply the required updates.

Between 2^nd and 4 ^th June 2026, Progress published security advisories to address vulnerabilities in the following products. Included was a critical update for the following:

• Sitefinity CMS and Sitefinity Insight - multiple versions
• Progress Kemp LoadMaster - version GA v7.2.63.1 and prior
• Progress Kemp LoadMaster - version LTSF v7.2.54.17 and prior

• Sitefinity Security Advisory for Addressing Security Vulnerabilities CVE-2026-7312, CVE-2026-7198, CVE-2026-7195, CVE-2026-7201, CVE-2026-7313, May 2026
• LoadMaster Critical Security Bulletin – June 2026 – (CVE-2026-8037, CVE-2026-33691)
• Progress Trust Center
• CISA KEV: CVE-2026-8037

As of 5^th August 2026, GitHub is affected by vulnerabilities in the following product:

• Enterprise Server
  • 3.17.0 Prior to 3.17.16
  • 3.17.0 Prior to 3.17.19
  • 3.18.0 Prior to 3.18.10
  • 3.18.0 Prior to 3.18.13
  • 3.19.0 Prior to 3.19.10
  • 3.19.0 Prior to 3.19.7
  • 3.20.0 Prior to 3.20.3
  • 3.20.0 Prior to 3.20.6
  • 3.21.0 Prior to 3.21.4

• Release notes - GitHub Enterprise Server 3.17 Docs
• Release notes - GitHub Enterprise Server 3.18 Docs
• Release notes - GitHub Enterprise Server 3.19 Docs
• Release notes - GitHub Enterprise Server 3.20 Docs
• Release notes - GitHub Enterprise Server 3.21 Docs
• GitHub Enterprise Server releases - GitHub Enterprise Server 3.19 Docs

As of 6^th August 2026, Foxit is affected by a vulnerability in the Foxit PDF Services API - before 2026-07-27.

Review the provided Security Bulletins | Foxit and apply the necessary updates.

As of 5^th August 2026, Cisco is affected by vulnerabilities in the following products:

• Cisco Catalyst SD-WAN Release
  • prior to 20.9.10
  • prior to 20.12.8.1
  • prior to 20.15.6
  • prior to 20.18.4
  • prior to 26.1.2

• Cisco IOS XE Software Release
  • prior to 17.9.10
  • prior to 17.12.8
  • prior to 17.15.6
  • prior to 17.18.4 and 17.18.4a
  • prior to 26.1.2

• Cisco Secure FMC Software Release
  • prior to Cisco_Firepower_Mgmt_Center_Hotfix_GB-7.0.9.1-3.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_HL-7.2.11.1-4.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_HG-7.4.7.1-3.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_CY-7.6.5.1-2.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_AM-7.7.12.1-2.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_P-10.0.1.1-2.sh.REL.tar

• Cisco IOS XE Software with SNMPv1
• Cisco IOS XE Software with SNMPv2c
• Cisco IOS XE Software with SNMPv3
• Cisco IOS XE Software with BEEP feature enabled
• Cisco IOS Software or IOS XE Software with XMCP Server feature enabled

• Cisco NFVIS Release
  • prior to 4.12
  • prior to 4.13
  • prior to 4.14
  • prior to 4.15

• Cisco UCS Server Software Release
  • prior to 4.2
  • prior to 4.3
  • prior to 6.0
  • prior to 3.2
  • prior to 4.15
  • prior to 4.3

• Cisco Telemetry Broker Appliances
  • prior to 6.0(2.260143)

• IEC6400 Edge Compute Appliances
  • prior to 4.3(6.260054)

• IOS XRv 9000 M7 Appliances
  • prior to 6.0(2.260143)

• Secure Endpoint Private Cloud Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 4.3(6.260054) (M6)

• Secure Firewall Management (FMC) Center Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 6.0(2.260143) (M6, M8)

• Secure Malware Analytics Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 4.3(6.260054) (M6)

• Secure Network Analytics Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 6.0(2.260143) (M6)

• prior to 4.3(2.260020) (M5)

• prior to 6.0(2.260143) (M6, M8)

• Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026
• Cisco IOS XE Software Security Hardening Release: August 2026
• Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability
• Cisco IOS XE Software SNMP Denial of Service Vulnerability
• Cisco Security Advisories

As of 4^th August 2026, Django is affected by vulnerabilities in the following product:

• Django
  • before 6.0.8
  • before 5.2.17

As of 4^th August 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following product:

• EdgeConnect SD-WAN Orchestrator
  • Prior to or equal to 9.6.2.40208
  • Prior to or equal to 9.6.3.40137

Review the provided web links and apply any necessary updates as they become available.

• HPESBNW05100 rev.1 - Multiple Vulnerabilities in HPE Networking EdgeConnect Orchestrator 9.6 branch
• HPE Security Bulletin Library

As of 27^th July 2026, JetBrains is affected by a vulnerability in the TeamCity - prior to version 2026.1.3 and 2025.11.7.

Review the provided web links and apply any necessary updates as they become available.

On 5^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-63077 to their Known Exploited Vulnerabilities (KEV) Database.

• Fixed security issues
• Security - The JetBrains Blog
• CISA KEV: CVE-2026-63077

On 4^th August 2026, Zyxel published security advisories to address vulnerabilities in the following products:

• ATP series firmware
  • from V4.32 through V5.42 Patch 1
• USG FLEX 50(W) series firmware
  • from V4.16 through V5.42 Patch 1
• USG FLEX series firmware
  • from V4.50 through V5.42 Patch 1
• USG20(W)-VPN series firmware
  • from V4.16 through V5.42 Patch 1
• WAX650S firmware
  • Prior to or equal to 7.10(ABRM.4)C0

• Zyxel security advisory for path traversal vulnerability in the configuration file execution CLI command of ZLD firewalls
• Zyxel security advisory for command injection and improper authentication vulnerabilities in certain APs, FWA7, and Security Routers | Zyxel Networks

As of 5^th August 2026, Progress Software Corporation is affected by vulnerabilities in the following product:

• MarkLogic Server
  • Prior to 11.3.6
  • Prior to 12.0.3

• Marklogic Critical Security Alert Bulletin - August 2026 – (CVE-2026-7326, CVE-2026-7327, CVE-2026-7329, CVE-2026-7557, CVE-2026-8709, CVE-2026-9190, CVE-2026-9192, CVE-2026-9193, CVE-2026-9195, CVE-2026-9203)
• Progress Trust Center

As of 5^th August 2026, the Jenkins Project is affected by vulnerabilities in the following products:

• Jenkins
  • ALL except 2.568.2
  • ALL except 2.576

• Jenkins AWS CodeBuild Plugin
  • Prior to or equal to 0.59

• Jenkins CodeSonar Plugin
  • Prior to or equal to 3.6.0

• Jenkins Google Chat Notification Plugin
  • Prior to or equal to 166.ve6b_de280f2e8

• Jenkins Horreum Plugin
  • Prior to or equal to 0.16.162.v33b_4a_a_b_5f828

• Jenkins Ivy Report Plugin
  • Prior to or equal to 1.2

• Jenkins Multijob Plugin
  • Prior to or equal to 669.v9d96a_d9c71b_0

• Jenkins Violation Comments to GitLab Plugin
  • Prior to or equal to 2.62.0

• Jenkins XML Job to Job DSL Plugin
  • Prior to or equal to 0.1.13

• Remoting
  • ALL except 3355.3357.v931d3c992987
• ALL except 3385.vf1123fb_515da_

• Jenkins Security Advisory 2026-08-05
• Security Advisories

As of 30^th July 2026, IBM is affected by vulnerabilities in the following products:

• App Connect Enterprise
  • Prior to or equal to 12.0.12.27
  • Prior to or equal to 13.0.7.2
• DataPower Gateway 10.5.0
  • Prior to or equal to 10.5.0.21
• DataPower Gateway 10.6.0
  • Prior to or equal to 10.6.0.9
• DataPower Gateway 10.6CD
  • Prior to or equal to 10.6.6
• DataPower Gateway 11.0.0
  • Prior to or equal to 11.0.0.1
• Db2
  • Prior to or equal to 11.5.9
  • Prior to or equal to 12.1.4
• Engineering Requirements Management DOORS and DOORS Web Access
  • Prior to or equal to 9.6.1.13
  • Prior to or equal to 9.7.2.11
• Enterprise Build of Quarkus
  • Prior to or equal to 3.27.4.SP2
  • Prior to or equal to 3.33.2.SP2
• HMC V10.3.1050.0
  • Prior to or equal to 10.3.1064.0
• HMC V11.1.1110.0
  • Prior to or equal to 11.1.1112.0
• Langflow OSS
  • Prior to or equal to 1.10.0
  • Prior to or equal to 1.10.1
  • Prior to or equal to 1.8.4
• Operations Analytics - Log Analysis
  • 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3
  • 1.3.6.0, 1.3.6.1
  • 1.3.7.0, 1.3.7.1, 1.3.7.2
  • 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4
• Planning Analytics Local
  • Prior to or equal to 2.1.21
• PowerVM Hypervisor
  • Prior to or equal to FW1060.71
  • Prior to or equal to FW1110.20
  • Prior to or equal to FW950.H1
• Security Verify Access
  • Prior to or equal to 10.0.9.1
• Security Verify Access Container
  • Prior to or equal to 10.0.9.1
• UCD - IBM DevOps Deploy
  • Prior to or equal to 8.0.1.13
  • Prior to or equal to 8.1.2.6
  • Prior to or equal to 8.2.1.0
• UCD - IBM UrbanCode Deploy
  • Prior to or equal to 7.2.3.23
  • Prior to or equal to 7.3.2.18
• Verify Identity Access
  • Prior to or equal to 11.0.2
• Verify Identity Access Container
  • Prior to or equal to 11.0.2
• WebSphere Application Server
  • 8.5
  • 9.0
• WebSphere Application Server - Liberty
  • Prior to or equal to 26.0.0.7
• webMethods Integration (on prem)
  • 10.15, 10.11

On 4^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-9198 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web link and apply the necessary updates.

• IBM Product Security Incident Response
• CISA KEV: CVE-2026-9198

As of 4^th August 2026, Dell is affected by vulnerabilities in the following products:

• Display and Peripheral Manager (DDPM Mac)
  • Prior to 2.3.0.1005
• Monitor driver
  • Prior to 1.0.0.0

Review the provided web links and apply any necessary updates as they become available.

• DSA-2026-295: Security Update for Dell Monitor Driver for an Improper Link Resolution Before File Access ('Link Following') Vulnerability | Dell US
• DSA-2026-319 Security Updates for Dell Display and Peripheral Manager (DDPM Mac) for Multiple Vulnerabilities | Dell US
• Security Advisories, Notices and Resources | Dell Canada

On 3^rd August 2026, Tenable published a security advisory to address vulnerabilities in Sensor Proxy - Prior to version 1.4.2.

Review the following Tenable Security Advisory and apply the necessary updates:

• [R1] Sensor Proxy Version 1.4.2 Fixes One Vulnerability - Security Advisory | Tenable®
• Tenable Product Security Advisories

As of 3^rd August 2026, MISP published a security advisory to address vulnerabilities in the MISP (Malware Information Sharing Platform) cti-transmute – prior to or equal to version 1.4.0.

Review the provided web link and apply the necessary updates.

• fix: [website] Block file and network fetches in the evaluation PDF r… · MISP/cti-transmute@20f3530 · GitHub
• fix: [website] Cap the activity-timeline day range · MISP/cti-transmute@321892d · GitHub
• fix: [website] Require POST to delete a user · MISP/cti-transmute@4f0d051 · GitHub

As of 3^rd August 2026, N-able published a security advisory to address vulnerabilities in N-central  – prior to version 2026.3.1.7.

On 3^rd August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-18577 to their Known Exploited Vulnerabilities (KEV) Database.

On 4^th August 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-18556 to their Known Exploited Vulnerabilities (KEV) Database.

• 2026.3 HF1 Release Notes
• N-central 2026.3 Hotfix 1 – Mitigation for CVE-2026-18577 | N-able Status
• Release Notes | N-able Status
• CISA KEV:CVE-2026-18577
• CISA KEV: CVE-2026-18556

On 3^rd August 2026, Adobe published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• Adobe Campaign Classic

• ACC v7: 7.4.3 build 9398 and prior

• Adobe Premiere

• 26.2.2 and prior

• Adobe Premiere Pro

• 25.6.5 and prior

Review the provided web links and apply any necessary updates as they become available.

• Security update available for Adobe Campaign Classic | APSB26-120
• Security Updates Available for Adobe Premiere Pro | APSB26-76
• Adobe Product Security Incident Response Team

As of 4^th August 2026, Veeam is affected by vulnerabilities in the following products:

·       ONE

o   Prior to or equal to 13.1.0.7034

·       Service Provider Console

o   Prior to 9.3.0.35057

Review the provided web links and apply any necessary updates as they become available.

·       KB4893: Vulnerabilities Resolved in Veeam Service Provider Console 9.3

·       KB4892: Vulnerabilities Resolved in Veeam ONE 13.1

·       Veeam Support Knowledge Base

As of 3^rd August 2026, Check Point published a security advisory to address vulnerabilities in the following products. Included was a critical update for the following :

• Multi-Domain Security Management Server (MDS)

• R80
• R80.10
• R80.20
• R80.30
• R80.40
• R81
• R81.10
• R81.20 with Jumbo Hotfix Accumulator Take 160 or below
• R82 with Jumbo Hotfix Accumulator Take 121 or below
• R82.10 with Jumbo Hotfix Accumulator Take 39 or below

• Security Management Server

• R80
• R80.10
• R80.20
• R80.30
• R80.40
• R81
• R81.10
• R81.20 with Jumbo Hotfix Accumulator Take 160 or below
• R82 with Jumbo Hotfix Accumulator Take 121 or below
• R82.10 with Jumbo Hotfix Accumulator Take 39 or below

Review the provided web links and perform the suggested mitigations.

• sk185222 - CVE-2026-18574 - Management Authentication Bypass
• Check Point Security

As of 30^th July 2026, Rails is affected by vulnerabilities in the following product:

• Rails

• Prior to 8.0.5.1
• Prior to 8.1.3.1
• Prior to 7.2.3.2

Review the provided web links and apply any necessary updates as they become available.

• Release 7.2.3.2 · rails/rails - GitHub
• Release 8.0.5.1 · rails/rails - GitHub
• Release 8.1.3.1 · rails/rails - GitHub
• [CVE-2026-66066] Possible arbitrary file read and remote code execution in Active Storage variant processing
• Release list - rails/rails

On 30^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 151.0.7922.71/.72  (Windows/Mac), and 151.0.7922.71 (Linux).

Review the Google security bulletins and apply the required updates.

As of 30^th July 2026, Spring is affected by vulnerabilities in the following products:

• Spring Tools for Eclipse
  • Prior to or equal to 5.2.0
• Spring Tools for VSCode / Cursor / Theia
  • Prior to or equal to 2.2.0

Review the provided web links and apply any necessary updates as they become available.

• CVE-2026-47858: live information startup mode is vulnerable for remote code execution
• CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
• CVE-2026-47882: Spring Boot DevTools remote secret generated with a non-cryptographic PRNG
• CVE-2026-59326: HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server
• CVE-2026-59327: Cleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch Configurations
• CVE-2026-59328: Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips
• Spring | Security Advisories

As of 30^th July 2026, VMware is affected by vulnerabilities in the following products:

• Cloud Foundation
  • 5.x
  • 9.0.x.x
  • 9.1.x.x
  • Prior to 5.2.3
• ESX
  • Prior to ESXi-9.0.2.0100-25595025
  • Prior to ESXi-9.1.0.0-25370933
  • Prior to ESXi-9.1.0.0200-25557999
  • Prior to ESXi80U3i-25205845
  • Prior to ESXi80U3k-25595708
• Fusion
  • Prior to 26H1
• Telco Cloud Infrastructure
  • 3.0
• Telco Cloud Platform
  • 4.x
  • 5.0.x
  • 5.1.x
• Workstation
  • Prior to 26H1
• vCenter
  • Prior to 8.0 U3k
  • Prior to 9.0.2.0100
  • Prior to 9.1.0.0300
• vSphere Foundation
  • 9.0.x.x
  • 9.1.x.x

Review the following advisories and apply the necessary updates:

• VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)
• Security Advisories - VMware Cloud Foundation

As of 30^th July 2026, PHP Group is affected by vulnerabilities in the following product:

• PHP
  • Prior to 8.2.33
  • Prior to 8.3.33
  • Prior to 8.4.24
  • Prior to 8.5.9

Review the provided web links and apply any necessary updates as they become available.

• SQL injection in ext-pgsql via E'...' backslash breakout
• Out-of-bounds write in bccomp() via crafted operand and scale

As of 30^th July 2026, SolarWinds published security advisories to address vulnerabilities in the SolarWinds Web Help Desk (WHD) - prior to 2026.2.1.

Review the provided web links and apply the necessary updates.

• WHD 2026.2.1 release notes
• SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability (CVE-2026-28323)
• SolarWinds Security Vulnerabilities

On 30^th July 2026, BDNCIRT issued an Advisory regarding SideWinder Spear-Phishing Campaign Against Bangladesh Leveraging Dual-Format Weaponized Documents.

Review the advisory about SideWinder Spear-Phishing Campaign and take the necessary action.

On 29^th July 2026, VMware published security advisories to address vulnerabilities in the following products:

• VMware ESX version 8.0
• VMware vCenter version 8.0 (Fixed in 8.0 U3k)
• VMware Workstation version 25H2
• VMware Fusion version 25H2
• VMware Cloud Foundation versions 9.1.x.x (Fixed in 9.1.0.0300)
• VMware Cloud Foundation versions 9.0.x.x (Fixed in 9.0.2.0100)
• VMware Cloud Foundation versions 5.x (Async patch to 8.0 U3k)
• VMware vSphere Foundation versions 9.1.x.x (Fixed in 9.1.0.0300)
• VMware vSphere Foundation versions 9.0.x.x (Fixed in 9.0.2.0100)
• VMware Telco Cloud Platform versions 3.0, 4.x, 5.0.x, 5.1.x
• VMware Telco Cloud Infrastructure version 3.0

Review the Broadcom VMware Security Advisory and apply the necessary updates.

On 28^th July 2026, Adobe published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• Adobe Bridge

• Prior to 15.1.7
• Prior to 16.0.6

• Format Plugins

• Prior to 2026.07

Review the provided web links and apply any necessary updates as they become available.

• Security updates available for Adobe Format Plugins | APSB26-87
• Security Updates Available for Adobe Bridge | APSB26-89
• Adobe Product Security Incident Response Team

As of 29^th July 2026, Cisco is affected by a vulnerability in the following product:

• Cisco Secure Firewall Management Center (FMC)

• Prior to 7.0.9.1
• Prior to 7.2.11.1
• Prior to 7.4.7.1
• Prior to 7.6.5.1
• Prior to 7.7.12.1
• Prior to 10.0.1.1

Cisco has indicated that CVE-2026-20316 is being exploited.

On 29^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20316 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply any necessary updates as they become available.

• Cisco Security Advisories
• Cisco Secure Firewall Management Center Software Static Credential Vulnerability
• CISA KEV : CVE-2026-20316

As of 29^th July 2026, GitLab is affected by vulnerabilities in the following product:

• GitLab
  • Prior to 19.0.5
  • Prior to 19.1.3
  • Prior to 19.2.1

Review the provided web links and apply any necessary updates as they become available.

• GitLab Patch Release: 19.2.1, 19.1.3, 19.0.5
• GitLab release notes

On 27^th July 2026, Apache published a security advisory to address vulnerabilities in Apache Thrift prior to 0.24.0.

Review the provided web link and apply the necessary updates.

• CVE-2026-48586: Apache Thrift: TZlibTransport Decompression Size Limit
• CVE-2026-49158: Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb
• CVE-2026-55969: Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()
• CVE-2026-58023: Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path

As of 27^th July 2026, Arista Networks is affected by vulnerabilities in the following product:

• VeloCloud Orchestrator On-Prem
  • from 5.2.0 to versions prior to 5.2.3.14
  • from 6.1.0 to versions prior to 6.1.3.4
  • from 6.4.0 to versions prior to 6.4.2.4
  • from 7.0.0 to versions prior to 7.0.0.1

On 27^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-16812 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply any necessary updates as they become available.

• Security Advisory 0144
• Security Advisory 0145
• CISA KEV: CVE-2026-16812

On 27^th July 2026, JetBrains is affected by a vulnerability in the following product:

• TeamCity
  • Prior to 2026.1.3, 2025.11.7

Review the provided web links and apply any necessary updates as they become available.

• Fixed security issues
• Security - The JetBrains Blog

As of 27^th July 2026, Apple is affected by vulnerabilities in the following products:

• iOS and iPadOS
  • Prior to 26.6
• macOS
  • Prior to 14.8.8
  • Prior to 15.7.8
  • Prior to 26.6
• tvOS
  • Prior to 26.6
• visionOS
  • Prior to 26.6
• Safari
  • Prior to 26.6
• watchOS
  • Prior to 26.6

Review the provided web link and apply any necessary updates as they become available.

• Apple security releases - Apple Support

On 26^th July 2026, Microsoft published a security update to address vulnerabilities in Microsoft Edge (Chromium-based) prior to 150.0.4078.99.

Review the provided web links and apply any necessary updates as they become available.

• Security Update Guide - Microsoft Security Response Center
• Security Update Guide - Microsoft Security Response Center (1)
• Security Update Guide - Microsoft Security Response Center (2)
• Security Update Guide - Microsoft Security Response Center (3)

On 25^th July 2026, Redis published security advisories addressing vulnerabilities in Redis versions prior to 8.8.0.

Review the following Redis Security Advisory and apply the necessary updates:

• Comparing 8.6.4...8.8.0
• Reject corrupt stream RDB with shared NACK across consumers #15081
• Releases · redis/redis · GitHub

On 10^th February 2026, Fortinet published security advisories to address vulnerabilities in the following products:

• FortiAuthenticator 6.6 - versions 6.6.0 to 6.6.6
• FortiAuthenticator 6.5 - all versions
• FortiAuthenticator 6.4 - all versions
• FortiAuthenticator 6.3 - all versions
• FortiClientWindows 7.4 - versions 7.4.0 to 7.4.4
• FortiClientWindows 7.2 - versions 7.2.0 to 7.2.12
• FortiClientWindows 7.0 - all versions
• FortiOS 7.6 - versions 7.6.0 to 7.6.4
• FortiOS 7.4 - versions 7.4.0 to 7.4.10
• FortiOS 7.2 - all versions
• FortiOS 7.0 - all versions
• FortiOS 6.4 - all versions
• FortiSandbox 5.0 - version 5.0 to 5.1
• FortiSandbox 4.4 - version 4.4.0 to 4.4.7
• FortiSandbox 4.2 - all versions
• FortiSandbox 4.0 - all versions

On 27^th July 27, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-68686 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web link and apply the necessary updates.

• Fortinet PSIRT Advisories
• CISA KEV: CVE-2025-68686

On 23^rd July 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 150.0.4078.96.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 23^rd July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.186/.187 (Windows/Mac), and 150.0.7871.186 (Linux).

Review the Google security bulletins and apply the required updates.

On 22^nd July 2026, MongoDB published security advisories to address vulnerabilities in the following products:

• MongoDB Compass - versions prior to 1.49.7
• MongoDB Server - versions prior to 7.0.39
• MongoDB Server - versions prior to 8.0.28
• MongoDB Server - versions prior to 8.2.12
• MongoDB Server - versions prior to 8.3.7

Review the provided web links and apply the necessary updates.

• Security Related: Common Vulnerabilities and Exposures (CVEs)
• MongoDB Alerts

On 23^rd July 2026, Progress published a security update to address vulnerabilities in the following products.

• MOVEit Transfer - versions prior to 2025.1.5
• MOVEit Transfer - versions prior to 2026.0.3

Review the provided web links and apply the necessary updates:

• MOVEit Transfer 2026 Release Notes - Fixed Issues in 2026.0.3
• Progress Trust Center

On 22^nd July 2026, Check Point published a security advisory to address vulnerabilities in the following products. Included was a critical update for the following :

• Security Management, Multi-Domain Management - multiple versions
• Firewall, Multi-Domain Management, Multi-Domain Log Server - multiple versions

Check Point is aware that CVE-2026-16232 is being exploited in the wild.

On 22^nd July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-16232 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and perform the suggested mitigations.

• Security Advisory - Action Required - July 2026 Security Update
• Check Point Security
• CISA KEV: CVE-2026-16232

On 14^th July 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• Age of Empires II: Definitive Edition Game
• Azure Active Directory
• Azure CycleCloud 8.9.1
• Azure Monitor Agent Metrics Extension
• Azure Open AI
• Azure Spring Apps
• Azure Synapse
• Fabric Data Warehouse
• GitHub Copilot Plugin for JetBrains IDEs
• Microsoft .NET Framework
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 4.8.1
• Microsoft 365 Apps
• Microsoft 365 Apps for Enterprise
• Microsoft 365 Copilot
• Microsoft 365 Copilot for Android
• Microsoft 365 Copilot for iOS
• Microsoft Bing Search for iOS
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics NAV 2018
• Microsoft Edge (Chromium-based)
• Microsoft Entra Provisioning Service
• Microsoft Excel 2016
• Microsoft Exchange Online
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2019
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft Malware Protection Engine
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365 for Mac
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Office for Android
• Microsoft PC Manager
• Microsoft PowerPoint 2016
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Surface Go 2
• Microsoft Surface Go 3
• Microsoft Surface Hub
• Microsoft Surface Hub 2S
• Microsoft Surface Hub 3
• Microsoft Surface Laptop Go
• Microsoft Surface Laptop Go 2
• Microsoft Surface Laptop Go 3
• Microsoft Surface Pro 7+
• Microsoft Surface Pro 8
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Word 2016
• AspNet.OData
• AspNetCore.OData
• Minecraft Bedrock Dedicated Server
• Office Online Server
• Power BI Report Server
• Surface Laptop 4 with AMD Processor
• Surface Laptop 4 with Intel Processor
• Surface Windows Dev Kit
• Visual Studio Code
• Windows 10
• Windows 11
• Windows 11 Version
• Windows Admin Center
• Windows Remote Help
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025
• Windows Subsystem for Linux (WSL2)
• Windows Terminal for Windows 10
• Windows Terminal for Windows 11

Microsoft has indicated that CVE-2026-56164 and CVE-2026-56155 are being exploited.

On 14^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-56164 and CVE-2026-56155 to their Known Exploited Vulnerabilities (KEV) Database.

On 16^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-58644 to their Known Exploited Vulnerabilities (KEV) Database.

Open-source reporting indicates that CVE-2026-50522 is being exploited in the wild.

On 22^nd July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-50522 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• July 2026 Security Updates
• Security Update Guide
• CISA KEV: CVE-2026-56164
• CISA KEV: CVE-2026-56155
• CISA KEV: CVE-2026-58644
• CISA KEV: CVE-2026-50522

On 23^rd July 2026, JetBrains published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products:

• JetBrains GoLand - versions prior to 2026.2
• JetBrains IntelliJ IDEA - version prior to 2026.2
• JetBrains PhpStorm - version prior to 2026.2
• JetBrains PyCharm - version prior to 2026.1.4 and 2026.2
• JetBrains TeamCity - version prior to 2026.1.2 and 2025.11.6
• JetBrains WebStorm - version prior to 2026.2

Review the JetBrains - Fixed security issues and apply the necessary updates.

On 21^st July 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Aruba Networking Private 5G Core - versions 1.26.1.1 and prior
• HPE Aruba Networking EdgeConnect SD-WAN Gateways - multiple versions and platforms
• HPE Aruba Networking AOS-CX - multiple versions and platforms

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05083 rev.1 - Private 5G Core, Traefik StripPrefix Route-Level Auth Bypass via Path Normalization (CVE-2026-48020)
• HPESBNW05013 rev.1 - HPE Aruba Networking EdgeConnect SD-WAN Gateways, Multiple Vulnerabilities
• HPESBNW05081 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking AOS-CX
• HPE Security Bulletin Library

Between 2^nd and 3^rd June 2026, SolarWinds published security advisories to address vulnerabilities in the SolarWinds Serv-U - version 15.5.4 HF1 and prior.

Review the SolarWinds Security Vulnerabilities and apply the necessary updates.

On 21^st July 2026, Oracle published a security advisory to address vulnerabilities in multiple products. Included were critical updates for the following: 

• Oracle Database Server
• Oracle APEX
• Oracle Autonomous Health Framework
• Oracle Essbase
• Oracle Global Lifecycle Management
• Oracle GoldenGate
• Oracle NoSQL Database
• Oracle Spatial Studio
• Oracle SQL Developer
• Oracle TimesTen In-Memory Database
• Oracle Application Testing Suite
• Oracle Commerce
• Oracle Communications
• Oracle Construction and Engineering
• Oracle E-Business Suite
• Oracle Enterprise Manager
• Oracle Financial Services Applications
• Oracle Food and Beverage Applications
• Oracle Fusion Middleware
• Oracle Analytics
• Oracle HealthCare Applications
• Oracle Hospitality Applications
• Oracle Java SE
• Oracle JD Edwards
• Oracle MySQL
• Oracle PeopleSoft
• Oracle Retail Applications
• Oracle Siebel CRM
• Oracle Supply Chain
• Oracle Systems
• Oracle Utilities Applications
• Oracle Virtualization

Review Oracle Critical Patch Update Advisory - July 2026 and apply the necessary updates.

On 21^st July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.181/.182 (Windows/Mac), and 150.0.7871.181(Linux).

Review the Google security bulletins and apply the required updates.

On 21^st July 2026, Atlassian published security advisories to address vulnerabilities in the following products:

• Bamboo Data Center and Server - multiple versions
• Bitbucket Data Center and Server - multiple versions
• Confluence Data Center and Server - multiple versions
• Crowd Data Center and Server - multiple versions
• Fisheye/Crucible - versions 4.9.0 to 4.9.11
• Jira Data Center and Server - multiple versions
• Jira Service Management Data Center and Server - multiple versions
• Sourcetree for Mac - all versions from 3.4.11 to 3.4.12
• Sourcetree for Windows - all versions from 3.4.11 to 3.4.12

Review the following advisories and apply the necessary updates: 

• Security Bulletin - 21^st July 2026
• Atlassian Security Advisories and Bulletins

On 22^nd July 2026, ISC published security advisories to address vulnerabilities in the following products:

• ISC BIND 9 - versions 9.11.0 to 9.18.50
• ISC BIND 9 - versions 9.20.0 to 9.20.24
• ISC BIND 9 - versions 9.21.0 to 9.21.23
• BIND Supported Preview Edition - versions 9.11.3-S1 to 9.18.50-S1
• BIND Supported Preview Edition - versions 9.16.8-S1 to 9.18.50-S1
• BIND Supported Preview Edition - versions 9.18.11-S1 to 9.18.50-S1
• BIND Supported Preview Edition - versions 9.20.9-S1 to 9.20.24-S1

Review the BIND 9 Security Vulnerability Matrix and apply the necessary updates.

On 22^nd July 2026, n8n published security updates to address vulnerabilities in the following products:

• n8n - versions prior to 1.123.67
• n8n - versions prior to 2.32.1
• n8n - versions prior to 2.31.5

Review the following n8n Security Advisory and apply the necessary updates.

• Authenticated code execution in the n8n Git node
• n8n Security

On 22^nd July 2026, Veeam published security advisories to address vulnerabilities in the following products:

• MiCollab - multiple versions
• OpenScape UC - multiple versions

Review the following advisories and apply the necessary updates:

• Mitel Product Security Advisory MISA-2026-0006 - MiCollab Command Injection Vulnerability
• Mitel Product Security Advisory MISA-2026-0007 - OpenScape UC Cross Reflected Site Scripting (XSS) Vulnerability
• Mitel Security Bulletins

On 22^nd July 2026, Check Point published a security advisory to address vulnerabilities in the following products. Included was a critical update for the following :

• Security Management, Multi-Domain Management - multiple versions
• Firewall, Multi-Domain Management, Multi-Domain Log Server - multiple versions

Check Point is aware that CVE-2026-16232 is being exploited in the wild.

Review the provided web links and perform the suggested mitigations.

• Security Advisory - Action Required - July 2026 Security Update
• Check Point Security

On 21^st July 2026, Progress published a security update to address vulnerabilities in the following products.

• ShareFile Storage Zones Controller v5 - versions prior to 5.12.4
• ShareFile Storage Zones Controller v6 - versions prior to 6.0.1

Review the provided web links and apply the necessary updates.

• ShareFile Storage Zones Controller (SZC) Service Disruption Guidance, Login Issues, and Access Information
• Progress Trust Center

On 22^nd July 2026, Exim published security advisories to address vulnerabilities in Exim - version 4.88 to 4.99.4.

Review the following advisories and apply the necessary updates:

• Exim Security Advisory for EXIM-Security-2026-06-22.1 / GCVE-25-2026-07-45-1
• Exim Internet Mailer

On 22^nd July 2026, Drupal published security advisories to address vulnerabilities in Internationalization Single Sign-On - versions prior to 1.8.0.

Review the following Drupal Security Advisory and apply the necessary updates.

• Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081
• Drupal Security Advisories

On 20^th July 2026, Tenable published a security advisory to address vulnerabilities in Tenable Security Center - version 6.6.0 to 6.8.0.

Review the following Tenable Security Advisory and apply the necessary updates:

• [R1] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0: SC202607.1
• Tenable Product Security Advisories

On  21^st July 2026, Zyxel published security advisories to address vulnerabilities in the following products:

• DSL/Ethernet CPE - multiple versions and models
• Fiber ONTs - multiple versions and models
• Wireless Extenders - multiple versions and models

Review the following advisories and apply the necessary updates:

• Zyxel security advisory for post-authentication command injection vulnerability in certain DSL/Ethernet CPE, Fiber ONTs, and Wireless Extenders
• Zyxel Advisories

On 14^th July 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• Age of Empires II: Definitive Edition Game
• Azure Active Directory
• Azure CycleCloud 8.9.1
• Azure Monitor Agent Metrics Extension
• Azure Open AI
• Azure Spring Apps
• Azure Synapse
• Fabric Data Warehouse
• GitHub Copilot Plugin for JetBrains IDEs
• Microsoft .NET Framework
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 4.8.1
• Microsoft 365 Apps
• Microsoft 365 Apps for Enterprise
• Microsoft 365 Copilot
• Microsoft 365 Copilot for Android
• Microsoft 365 Copilot for iOS
• Microsoft Bing Search for iOS
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics NAV 2018
• Microsoft Edge (Chromium-based)
• Microsoft Entra Provisioning Service
• Microsoft Excel 2016
• Microsoft Exchange Online
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2019
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft Malware Protection Engine
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365 for Mac
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Office for Android
• Microsoft PC Manager
• Microsoft PowerPoint 2016
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Surface Go 2
• Microsoft Surface Go 3
• Microsoft Surface Hub
• Microsoft Surface Hub 2S
• Microsoft Surface Hub 3
• Microsoft Surface Laptop Go
• Microsoft Surface Laptop Go 2
• Microsoft Surface Laptop Go 3
• Microsoft Surface Pro 7+
• Microsoft Surface Pro 8
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Word 2016
• AspNet.OData
• AspNetCore.OData
• Minecraft Bedrock Dedicated Server
• Office Online Server
• Power BI Report Server
• Surface Laptop 4 with AMD Processor
• Surface Laptop 4 with Intel Processor
• Surface Windows Dev Kit
• Visual Studio Code
• Windows 10
• Windows 11
• Windows 11 Version
• Windows Admin Center
• Windows Remote Help
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025
• Windows Subsystem for Linux (WSL2)
• Windows Terminal for Windows 10
• Windows Terminal for Windows 11

Microsoft has indicated that CVE-2026-56164 and CVE-2026-56155 are being exploited.

On 14^th July 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-56164 and CVE-2026-56155 to their Known Exploited Vulnerabilities (KEV) Database.

On 16^th July  2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-58644 to their Known Exploited Vulnerabilities (KEV) Database.

Open-source reporting indicates that CVE-2026-50522 is being exploited in the wild.

Review the provided web links and apply the necessary updates.

• July 2026 Security Updates
• Security Update Guide
• CISA KEV: CVE-2026-56164
• CISA KEV: CVE-2026-56155
• CISA KEV: CVE-2026-58644

On 21^st July 2026, Mozilla published security advisories to address vulnerabilities in the following products:

• Firefox ESR - versions prior to 140.13
• Firefox ESR - versions prior to 115.38
• Firefox - versions prior to 153

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-70
• Mozilla Foundation Security Advisory 2026-69
• Mozilla Foundation Security Advisory 2026-68
• Mozilla Security Advisories

On 21^st July 2026, BDNCIRT issued an Advisory regarding GoldFactory / GoldPickaxe - Biometric-Stealing Mobile Banking Trojan Targeting e-KYC & Digital Identity Systems

Review the advisory GoldFactory / GoldPickaxe - Biometric-Stealing Mobile Banking Trojan Targeting e-KYC & Digital Identity Systems and take the necessary action.

Between 13^th and 19^th July 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• IBM API Connect V12 OnPrem - versions v12.1.0.0 to v12.1.1.0
• IBM Automation Decision Services - versions 24.0.0, 24.0.1 and 25.0.0
• IBM CICS Transaction Gateway Desktop Edition - versions prior to 10.1
• IBM CICS Transaction Gateway for Multiplatforms - versions prior to 10.1
• IBM Cloud Object Storage System - versions 3.20.0.0 to 3.20.1.66
• IBM Cloud Object Storage System - versions 3.8.1.54 to 3.19.5.56
• IBM Datacap Navigator - versions 9.1.7, 9.1.8 and 9.1.9
• IBM Datacap - versions 9.1.7, 9.1.8 and 9.1.9
• IBM Engineering AI Hub - versions 1.0.0, 1.1.0 and 1.2.0
• IBM Guardium Data Protection - version 12.1 and 12.2
• IBM Guardium Unified Discovery and Classification (GUDC) - versions 1.0.0 to 1.2.0
• IBM Installation Manager - versions prior to 1.10.1.4
• IBM Jazz Reporting Service - multiple versions
• IBM Packaging Utility - versions prior to 1.10.1.4
• IBM Process Automation Manager Open Edition Starter Kit for Banking - versions 9.3.1 to 9.4.1
• IBM QRadar Data Synchronization App - versions 1.0.0 to 3.3.0
• IBM QRadar User Behavior Analytics - versions 1.0.0 to 5.1.0
• IBM Rapid Network Automation - versions prior to 1.1.4 and 1.1.5
• IBM Sterling Secure Proxy - versions 6.1.0.0 to 6.1.0.4
• IBM Sterling Secure Proxy - versions 6.2.1.0 to 6.2.1.2 iFix01
• IBM Tivoli Netcool Configuration Manager - versions 6.4.2 GA to 6.4.2.24
• IBM WebSphere Service Registry and Repository - versions prior to 8.5
• IBM i - versions 7.6, 7.5, 7.4 and 7.3
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - versions 4.8.4 to 4.8.5
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - versions 5.0.0 to 5.3.3

Review the IBM Security Advisory and apply the necessary updates.

Between 13^th and 19^th July 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell DRAC9 - versions prior to 7.00.00.184
• Dell PowerEdge Server - multiple versions and models
• Dell PowerProtect Data Manager - versions prior to 20.2.0.0
• Dell SmartFabric Manager - versions prior to 2.2.1
• Dell Storage Monitoring and Reporting - versions prior to 6.1.1.0
• Dell Storage Resource Manager - versions prior to 6.1.1.0
• Dell ThinOS 10 - multiple versions and models
• Dell iDRAC9 - versions prior to 7.30.30.51

Review the provided Dell Security Advisory and apply the necessary updates.

Between 13^th  and 19^th July 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 14.04 LTS
• Ubuntu 16.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10

Review the Ubuntu Security Notices and apply the necessary updates.

On 13^th July 2026, ServiceNow published a security advisory to address a critical vulnerability in the following products:

• Brazil - versions prior to Brazil EA and Brazil GA
• Australia - versions prior to Australia Patch 2
• Zurich - versions prior to Zurich Patch 7b and Zurich Patch 9
• Yokohama - versions prior to Yokohama Patch 12 Hot Fix 1b and Yokohama Patch 13

Open-source reporting indicates that CVE-2026-6875 is being exploited in the wild.

Review the provided web links and apply the necessary updates.

• [Security Advisory] CVE-2026-6875 - Sandbox Escape in ServiceNow AI Platform
• ServiceNow security advisories

Between 13^th and 19^th July 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

On 16^th July 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitHub Enterprise Server - versions 3.21.x prior to 3.21.3
• GitHub Enterprise Server - versions 3.20.x prior to 3.20.5
• GitHub Enterprise Server - versions 3.19.x prior to 3.19.9
• GitHub Enterprise Server - versions 3.18.x prior to 3.18.12
• GitHub Enterprise Server - versions 3.17.x prior to 3.17.18

Review the following advisories and apply the necessary updates: 

• Enterprise Server 3.21.3
• Enterprise Server 3.20.5
• Enterprise Server 3.19.9
• Enterprise Server 3.18.12
• Enterprise Server 3.17.18

On 20^th July 2026, Zimbra published security advisories to address vulnerabilities in Zimbra Collaboration Suite (ZCS) Classic Web Client - versions prior to v10.1.20.

Review the following Zimbra Security Advisory and apply the necessary updates:

• Patch Release Update: Zimbra 10.1.20
• Zimbra Patch Release Updates

On 20^th July 2026, HPE published security advisories to address vulnerabilities in the HPE Telco Automated Assurance - version v1.4 and prior.

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05082 rev.1 - HPE Telco Automated Assurance, Multiple Vulnerabilities
• HPE Security Bulletin Library

On 17^th July 2026, WordPress published a security advisory to address vulnerabilities in the following product:

• WordPress 7.0 - versions prior to 7.0.2
• WordPress 6.9 - versions prior to 6.9.5
• WordPress 6.8 - versions prior to 6.8.6
• WordPress 7.1 beta - versions prior to 7.1 beta2

Open-source reporting indicates that CVE-2026-60137 and CVE-2026-63030 are being exploited in the wild.

Review the provided web links and apply the necessary updates.

• Facilitated SQL injection vulnerability in the `author__not_in` parameter of `WP_Query`
• REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
• WordPress 7.0.2 Release
• WordPress Releases

On 17^th July 2026, WordPress published a security advisory to address vulnerabilities in the following product:

• WordPress 7.0 - versions prior to 7.0.2
• WordPress 6.9 - versions prior to 6.9.5
• WordPress 6.8 - versions prior to 6.8.6
• WordPress 7.1 beta - versions prior to 7.1 beta2

Open-source reporting indicates that CVE-2026-60137 and CVE-2026-63030 are being exploited in the wild.

On 21^st July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-60137 and CVE-2026-63030 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• Facilitated SQL injection vulnerability in the `author__not_in` parameter of `WP_Query`
• REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
• WordPress 7.0.2 Release
• WordPress Releases
• CISA KEV: CVE-2026-60137
• CISA KEV: CVE-2026-63030

On 17^th July 2026, FreePBX published security advisories to address vulnerabilities in the following products:

• FreePBX Security-Reporting ucp (FreePBX 17) - versions prior to 17.0.9
• FreePBX Security-Reporting missedcall (FreePBX 16) - versions prior to 16.0.11
• FreePBX Security-Reporting missedcall (FreePBX 16) - versions prior to 17.0.6
• FreePBX Security-Reporting tts (FreePBX 17) - versions prior to 17.0.6
• FreePBX Security-Reporting tts (FreePBX 16) - versions prior to 16.0.6
• FreePBX Security-Reporting music (FreePBX 17) - versions prior to 17.0.7
• FreePBX Security-Reporting framework (FreePBX 16) - versions prior to 16.0.47
• FreePBX Security-Reporting framework (FreePBX 17) - versions prior to 17.0.30

• Unauthenticated remote code execution in FreePBX UCP via socket.io namespace auth bypass and AMI action injection
• Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
• Authenticated TTS AGI Command Injection Through TTS Name
• Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
• Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
• FreePBX Security Advisories

On 14^th July 2026, VMware published security advisories to address vulnerabilities in VMware Avi Load Balancer - multiple versions.

Review the following advisories and apply the necessary updates:

• VMSA-2026-0005: VMware Avi Load Balancer addresses multiple vulnerabilities (CVE-2026-47865, CVE-2026-47866, CVE-2026-47867, CVE-2026-47868, CVE-2026-47869, CVE-2026-47870, CVE-2026-47871)
• Security Advisories - Application Networking and Security

On 16^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.128/.129 (Windows/Mac), and 150.0.7871.128 (Linux).

Review the Google security bulletins and apply the required updates.

On 16^th July 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 150.0.4078.80.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 14^th July 2026, Zoom published a security advisory to address vulnerabilities in the following products:

• Remote Control for Zoom Contact Center for Windows - versions prior to 7.0.0
• Zoom Meeting SDK for Windows - versions prior to 6.6.11
• Zoom Rooms for Windows - versions prior to 7.1.0
• Zoom Workplace for Windows - versions prior to 7.0.5
• Zoom Workplace VDI Client for Windows - versions prior to 7.0.10, 6.5.18 and 6.6.15
• Zoom Workplace VDI Client for Windows - versions prior to 6.5.17 and 6.6.14

• Zoom Workplace for Windows - Improper Input Validation
• Zoom Rooms for Windows - Improper Privilege Management
• Zoom Workplace VDI Plugin for Windows - Improper Input Validation
• Zoom Clients for Windows - Race Condition
• Zoom Security Bulletins

On 14^th July 2026, Splunk published a security update to address vulnerabilities in the following products.

• Splunk Enterprise - multiple versions and platforms
• Splunk Cloud Platform - multiple versions and platforms

• SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise
• Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise
• Third-Party Package Updates in Splunk Enterprise - July 2026
• Splunk Security Advisories

On 14^th July 2026, JetBrains published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products:

• JetBrains TeamCity - versions prior to 2026.1.2
• JetBrains YouTrack - multiple versions
• JetBrains IntelliJ IDEA - versions prior to 2026.1.4 and 2026.2

On 14^th July 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• Age of Empires II: Definitive Edition Game
• Azure Active Directory
• Azure CycleCloud 8.9.1
• Azure Monitor Agent Metrics Extension
• Azure Open AI
• Azure Spring Apps
• Azure Synapse
• Fabric Data Warehouse
• GitHub Copilot Plugin for JetBrains IDEs
• Microsoft .NET Framework
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 4.8.1
• Microsoft 365 Apps
• Microsoft 365 Apps for Enterprise
• Microsoft 365 Copilot
• Microsoft 365 Copilot for Android
• Microsoft 365 Copilot for iOS
• Microsoft Bing Search for iOS
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics NAV 2018
• Microsoft Edge (Chromium-based)
• Microsoft Entra Provisioning Service
• Microsoft Excel 2016
• Microsoft Exchange Online
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2019
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft Malware Protection Engine
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365 for Mac
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Office for Android
• Microsoft PC Manager
• Microsoft PowerPoint 2016
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Surface Go 2
• Microsoft Surface Go 3
• Microsoft Surface Hub
• Microsoft Surface Hub 2S
• Microsoft Surface Hub 3
• Microsoft Surface Laptop Go
• Microsoft Surface Laptop Go 2
• Microsoft Surface Laptop Go 3
• Microsoft Surface Pro 7+
• Microsoft Surface Pro 8
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Word 2016
• AspNet.OData
• AspNetCore.OData
• Minecraft Bedrock Dedicated Server
• Office Online Server
• Power BI Report Server
• Surface Laptop 4 with AMD Processor
• Surface Laptop 4 with Intel Processor
• Surface Windows Dev Kit
• Visual Studio Code
• Windows 10
• Windows 11
• Windows 11 Version
• Windows Admin Center
• Windows Remote Help
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025
• Windows Subsystem for Linux (WSL2)
• Windows Terminal for Windows 10
• Windows Terminal for Windows 11

• July 2026 Security Updates
• Security Update Guide
• CISA KEV: CVE-2026-56164
• CISA KEV: CVE-2026-56155
• CISA KEV: CVE-2026-58644

On 9^th June 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• FortiSandbox 5.0 - versions 5.0.0 to 5.0.5
• FortiSandbox 4.4 - versions 4.4.0 to 4.4.8
• FortiSandbox Cloud 5.0 - versions 5.0.4 to 5.0.5
• FortiSandbox PaaS 5.0 - versions 5.0.4 through 5.0.5

• Second-Order OS Command Injection via JSON Input on start vnc feature
• Fortinet PSIRT Advisories
• CISA KEV: CVE-2026-25089

On 14^th April 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• FortiSandbox 4.4 - versions 4.4.0 to 4.4.8
• FortiSandbox 5.0 - versions 5.0.0 to 5.0.5
• FortiAnalyzer Cloud 7.6 - versions 7.6.2 to 7.6.4
• FortiManager Cloud 7.6 - versions 7.6.2 to 7.6.4
• FortiDDoS-F 7.2 - versions 7.2.1 to 7.2.2

• OS Command Injection through API endpoint
• Unauthenticated Authentication bypass and Privilege escalation in FortiSandbox
• Heap-based buffer overflow in oftpd daemon
• SQL Injection via API
• Fortinet PSIRT Advisories
• CISA KEV : CVE-2026-39808

On 14^th July 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Telco Intelligent Assurance (FAS and PDO) - versions 4.2.15 and prior
• HPE Unified OSS Console (UOC) - versions 3.1.21 and prior
• HPE Unified OSS Console Assurance Monitoring (UOCAM) - versions 3.1.21 and prior

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05076 rev.1 - HPE Telco Intelligent Assurance, Multiple Vulnerabilities
• HPESBNW05080 rev.1 - HPE Unified OSS Console (UOC) and HPE Unified OSS Console Assurance Monitoring (UOCAM), Multiple Vulnerabilities
• HPE Security Bulletin Library

On 14^th July 2026, Citrix published security advisories to address vulnerabilities in the following products:

• Citrix Secure Access Client for Windows - versions prior to 26.6.1.20
• Citrix Endpoint Analysis Client for Windows - versions prior to 26.5.1.7

Review the following advisories and apply the necessary updates:

• Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows Security Bulletin for CVE-2026-53565 and CVE-2026-53566
• Citrix Security Advisories

On 14^th July 2026, Notepad++ released security updates to address Notepad++ - version prior to 9.7.

Review the provided web links and apply the necessary updates.

• Notepad++ v8.9.7 release
• Notepad++ community

On 15^th July 2026, F5 published Quarterly Security Notifications for multiple products. Included were updates for the following:

• NGINX Agent - versions 2.37.0 to 2.46.5
• NGINX Instance Manager - versions 2.17.1 to 2.22.1
• NGINX Plus - versions 37.0.0.1 to 37.0.2.1
• NGINX Plus - versions R33 to R36
• NGINX Open Source - multiple versions
• NGINX Instance Manager - versions 2.17.0 to 2.22.1
• F5 WAF for NGINX - versions 5.9.0 to 5.13.3
• NGINX App Protect WAF - versions 5.2.0 to 5.8.0
• NGINX App Protect WAF - versions 4.11.0 to 4.16.0
• NGINX Gateway Fabric - versions 2.0.0 to 2.6.6
• NGINX Gateway Fabric - versions 1.3.0 to 1.6.2
• NGINX Ingress Controller - multiple versions
• BIG-IP Next SPK - multiple versions
• BIG-IP Next CNF - multiple versions
• BIG-IP Next for Kubernetes - versions 2.0.0 to 2.3.1
• BIG-IP (all modules) - multiple versions

Review the following F5 Security Advisory and apply the necessary updates.

• K000161837: Out-of-band Security Notification (15^th July, 2026)
• MyF5

On 14^th July 2026, Tenable published a security advisory to address vulnerabilities in the following product:

• Nessus Agent - versions 11.2.0 and prior
• Nessus Agent - versions 11.1.3 and prior

Review the following Tenable Security Advisory and apply the necessary updates:

• [R1] Tenable Agent Versions 11.2.1 and 11.1.4 Fix a Path Traversal Vulnerability
• Tenable Product Security Advisories

On 28^th May 2026, Oracle published a security advisory to address critical vulnerabilities in the following products:

• Oracle Communications Unified Assurance - versions 6.1.1 to 7.0.0
• Oracle Database Server - versions 23.4.0 to 23.26.2
• Oracle E-Business Suite - versions 12.2.3 to 12.2.15
• Oracle Hospitality OPERA 5 Property Services - versions 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and 5.6.28
• Oracle REST Data Services - versions 24.2.0 to 26.1.0

Open-source reporting indicates that CVE-2026-46817 is being exploited.

On 15^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-46817 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and perform the suggested mitigations.

• Oracle Critical Security Patch Update Advisory - May 2026
• Oracle Critical Patch Updates, Security Alerts and Bulletins
• CISA KEV: CVE-2026-46817

On 15^th July 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Cisco RoomOS Release 11 and earlier On-Premises Operation - versions prior to 11.32.6.0
• Cisco RoomOS Release 11 and earlier Cloud-Aware Operation - versions prior to RoomOS 11.39.1.1
• Cisco RoomOS Release 26 On-Premises Operation - versions prior to 26.5.2.2
• Cisco RoomOS Release 26 Cloud-Aware Operation - versions prior to RoomOS June 2026 (26.7.1.7)

Review the following advisories and apply the necessary updates: 

• Cisco RoomOS Security Hardening Release: July 2026
• Cisco Security Advisories

On 14^th July 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• FortiAuthenticator 6.6 - versions 6.6.0 to 6.6.2
• FortiAuthenticator 6.5 - versions 6.5.0 to 6.5.7
• FortiSandbox 5.0 - versions 5.0.0 to 5.0.2
• FortiSandbox 4.4 - versions 4.4.3 to 4.4.8

Review the following advisories and apply the necessary updates:

• Out of bounds read in GUI
• Unauthenticated VNC access exposed on all interfaces
• Fortinet PSIRT Advisories

On 14^th July 2026, Ivanti published security advisories to address vulnerabilities in Ivanti Xtraction - version 2026.2 and prior.

Review the following advisories and apply the necessary updates:

• Security Advisory Ivanti Xtraction (CVE-2026-14902, CVE-2026-14903)
• Ivanti Security Advisories

On 14^th July 2026, Adobe published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• Adobe After Effects - version 25.6.5 and prior
• Adobe After Effects - version 26.2.1 and prior
• Adobe Animate 2023 - version 23.0.15 and prior
• Adobe Animate 2024 - version 24.0.13 and prior
• Adobe Audition - version 25.6.4 and prior
• Adobe Audition - version 26.0 and prior
• Adobe Bridge - version 15.1.5 (LTS) and prior
• Adobe Bridge - version 16.0.3 and prior
• Adobe Commerce B2B - multiple versions
• Adobe Commerce - multiple versions
• Adobe Commerce Events - version 1.6.0 to 1.20.0
• Adobe Experience Manager (AEM) - version AEM Cloud Service (CS) Release 2026.5.0 and prior
• Adobe Experience Manager (AEM) - version 6.5 LTS Service Pack 1 and prior
• Adobe Experience Manager (AEM) - version 6.5 Service Pack 24 and prior
• Adobe Media Encoder - version 25.6.5 and prior
• Adobe Media Encoder - version 26.2.2 and prior
• Adobe Premiere - version 26.2.2 and prior
• Adobe Premiere Pro - version 25.6.5 and prior
• ColdFusion 2025 Update 10 and earlier versions
• ColdFusion 2023 Update 21 and earlier versions
• ColdFusion 2021 - version 2021.0.0.323925 and prior
• ColdFusion 2023 - version 2023.0.0.330468 and prior
• ColdFusion 2025 - version 2023.0.0.331385 and prior
• Content Credentials Command-Line Tool - version c2patool-v0.17.0 and prior
• Content Credentials JS SDK - version @contentauth/c2pa-web@0.7.0 and prior
• Content Credentials Rust SDK - version c2pa-v0.84.0 and prior
• Creative Cloud Desktop Application - version 6.9.1.1 and prior
• Illustrator 2025 - version 29.8.7 and prior
• Illustrator 2026 - version 30.5 and prior
• Magento Open Source - multiple versions

Review the Adobe Security Advisories and apply the necessary updates.

On 14^th July 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• .NET 10.0 installed on Linux
• .NET 10.0 installed on Mac OS
• .NET 10.0 installed on Windows
• .NET 8.0 installed on Linux
• .NET 8.0 installed on Mac OS
• .NET 8.0 installed on Windows
• .NET 9.0 installed on Linux
• .NET 9.0 installed on Mac OS
• .NET 9.0 installed on Windows
• Age of Empires II: Definitive Edition Game
• Azure Active Directory
• Azure CycleCloud 8.9.1
• Azure Monitor Agent Metrics Extension
• Azure Open AI
• Azure Spring Apps
• Azure Synapse
• Fabric Data Warehouse
• GitHub Copilot Plugin for JetBrains IDEs
• Microsoft .NET Framework
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 4.8.1
• Microsoft 365 Apps
• Microsoft 365 Apps for Enterprise
• Microsoft 365 Copilot
• Microsoft 365 Copilot for Android
• Microsoft 365 Copilot for iOS
• Microsoft Bing Search for iOS
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics NAV 2018
• Microsoft Edge (Chromium-based)
• Microsoft Entra Provisioning Service
• Microsoft Excel 2016
• Microsoft Exchange Online
• Microsoft Exchange Server 2016
• Microsoft Exchange Server 2019
• Microsoft Exchange Server Subscription Edition RTM
• Microsoft Malware Protection Engine
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365 for Mac
• Microsoft Office LTSC 2021
• Microsoft Office LTSC 2024
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC for Mac 2024
• Microsoft Office for Android
• Microsoft PC Manager
• Microsoft PowerPoint 2016
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Server Subscription Edition
• Microsoft Surface Go 2
• Microsoft Surface Go 3
• Microsoft Surface Hub
• Microsoft Surface Hub 2S
• Microsoft Surface Hub 3
• Microsoft Surface Laptop Go
• Microsoft Surface Laptop Go 2
• Microsoft Surface Laptop Go 3
• Microsoft Surface Pro 7+
• Microsoft Surface Pro 8
• Microsoft Visual Studio 2022
• Microsoft Visual Studio 2026
• Microsoft Word 2016
• AspNet.OData
• AspNetCore.OData
• Minecraft Bedrock Dedicated Server
• Office Online Server
• Power BI Report Server
• Surface Laptop 4 with AMD Processor
• Surface Laptop 4 with Intel Processor
• Surface Windows Dev Kit
• Visual Studio Code
• Windows 10
• Windows 11
• Windows 11 Version
• Windows Admin Center
• Windows Remote Help
• Windows Server 2012
• Windows Server 2012 R2
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025
• Windows Subsystem for Linux (WSL2)
• Windows Terminal for Windows 10
• Windows Terminal for Windows 11

Microsoft has indicated that CVE-2026-56164 and CVE-2026-56155 are being exploited.

On 14^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-56164 and CVE-2026-56155 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• July 2026 Security Updates
• Security Update Guide
• CISA KEV: CVE-2026-56164
• CISA KEV: CVE-2026-56155

On 14^th July 2026, SonicWall published a security advisory to address critical vulnerabilities in the following products:

• SMA1000 Models (6210, 7210 & 8200v) - version 12.4.3-03245, 12.4.3-03387 and 12.4.3-03434 (platform-hotfix)
• SMA1000 Models (6210, 7210 & 8200v) - version 12.5.0-02283, 12.5.0-02624 and 12.5.0-02800 (platform-hotfix)

SonicWall indicates that CVE-2026-15409 and CVE-2026-15410 are being exploited.

On 14^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-15409 and CVE-2026-15410 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
• SonicWall Security Advisories
• CISA KEV: CVE-2026-15409
• CISA KEV: CVE-2026-15410

On 14^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.124/.125 (Windows/Mac), and 150.0.7871.124 (Linux).

Review the Google security bulletins and apply the required updates.

On 14^th July 2026, SAP published security advisories to address vulnerabilities in multiple products. Included were updates for the following:

• SAP Approuter node.js package - versions prior to 20.10.0
• SAP Approuter node.js package - versions prior to 21.2.0
• SAP Change and Transport System Attach Tool (ctsattach) - version CTS_UPLOAD_CLT 1
• SAP Commerce Cloud - versions HY_COM 2205, COM_CLOUD 2211 and 2211-JDK21
• SAP CRM (WebClient UI) - versions S4FND 104, 105 and 106
• SAP Fiori (launchpad) - versions SAP_UI 754, 755, 756, 757, 758 and 816
• SAP Integration Suite (Edge Integration Cell) - versions prior to 8.43.11
• SAP HANA Extended Application Services classic model (User Self Service) - version HDB 2.00
• SAP NetWeaver Application Server ABAP - versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, KERNEL 7.22, 7.53. 7.54, 7.77, 7.89, 7.93, 9.16, 9.18, 9.19 and 9.20
• SAP NetWeaver Application Server ABAP (applications based on Business Server Pages) - multiple versions
• SAP NetWeaver Application Server Java (Configuration Wizard) - version ENGINEAPI 7.50
• SAP NetWeaver Application Server Java (Web Container) - version LMCTC 7.50
• SAP NetWeaver AS Java - versions SERVERCORE 7.50, CORE-TOOLS 7.50 and J2EE-APPS 7.50
• SAP NetWeaver Enterprise Portal - version EP-RUNTIME 7.50
• SAProuter on Microsoft Windows - versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, SAP_ROUTER 7.53, 7.54, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 9.16, 9.17 and 9.18
• SAP S/4 HANA (Create Single Payment) - versions S4CORE 102, 103, 104, 105, 106, 107, 108 and 109
• SAP S/4HANA (Draft operation) - version S4CORE 108
• SAP S/4HANA Project Management (PPM-PRO) - multiple versions

Review the SAP Security Patch Day - July 2026 and apply the necessary updates.

On 14^th July 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Compute Scale-up Server 3200 - versions prior to v1.76.44
• HPE Compute Scale-up Server 3250 - versions prior to v1.02.48

Review the provided web link and apply the necessary updates, once available:

• HPESBHF05079 rev.1 - HPE Compute Scale-up Server 3200 and 3250 platforms, Multiple Vulnerabilities
• HPE Security Bulletin Library

On 14^th July 2026, Mozilla published security advisories to address vulnerabilities in Firefox - versions prior to 152.0.6.

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-67
• Mozilla Security Advisories

On 13^th July 2026, ServiceNow published security advisories to address vulnerabilities in the following products:

• Brazil - versions prior to Brazil EA and Brazil GA
• Australia - versions prior to Australia Patch 2
• Zurich - versions prior to Zurich Patch 7b and Zurich Patch 9
• Yokohama - versions prior to Yokohama Patch 12 Hot Fix 1b and Yokohama Patch 13

Review the provided web link and apply the necessary updates, once available:

• [Security Advisory] CVE-2026-6875 - Sandbox Escape in ServiceNow AI Platform
• ServiceNow security advisories

On 14^th July 2026, Veeam published security advisories to address vulnerabilities in the Veeam Software Appliance Updater Component - versions prior to 12.3.0.65.

Review the following advisories and apply the necessary updates:

• Veeam Software Appliance - Updater Component Vulnerability
• Veeam Knowledge Base

On 13^th July 2026, BDNCIRT issued an Advisory regarding Ghost Phishing: AES-GCM Encrypted Lures and EvilTokens Device-Code Phishing-as-a-Service Kit Targeting Microsoft 365 Accounts.

Review the Ghost Phishing: AES-GCM Encrypted Lures and EvilTokens Device-Code Phishing-as-a-Service Kit Targeting Microsoft 365 Accounts advisory and take the necessary action.

Between 6^th and 12^th July 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• IBM Aspera Enterprise WebApps - versions 1.0.0 to 1.0.3
• IBM Cloud Pak System - versions prior to 2.3.5.0
• IBM Cloud Pak for Data System (CPDS) - versions 1.0.0.0 to 1.0.10.0
• IBM Guardium Data Protection - versions prior to 12.2
• IBM Library Support for Spring - versions 3.2 to 3.2.26 and 3.4 to 3.4.18
• IBM Maximo Application Suite - Monitor Component – versions prior to 9.1 and 9.0
• IBM Operational Decision Manager - multiple versions
• IBM Planning Analytics Local - versions 2.1.0 to 2.1.21
• IBM RDi - version 9.9
• IBM SPSS Modeler - versions prior to 19.0.0.0
• IBM Software Support App (iOS) / (Android) - versions 4.0.1 to 4.1.0
• IBM Storage Protect Snapshot for Windows - versions 8.1.0.0 to 8.2.1.0
• IBM Tivoli Network Manager IP Edition - versions 4.2 GA to 4.2.0.24

Review the IBM Security Advisory and apply the necessary updates.

Between 6^th and 12^th July 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell Data Lakehouse - versions prior to 1.8.0.1
• Dell Enterprise SONiC Distribution - versions prior to 4.6.0

Review the following advisories and apply the necessary updates:

• DSA-2026-291: Security Update for Dell Data Lakehouse Third-Party Component Vulnerabilities
• DSA-2026-290: Security Update for Dell Enterprise SONiC Distribution Vulnerabilities
• Dell Security advisories and notices

Between 6^th  and 12^th July 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 18.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10
• Ubuntu 26.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 6^th and 12^th July 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

Between 8^th and 10^th July 2026, VMware published security advisories to address vulnerabilities in the following products:

• Open Source RabbitMQ - multiple versions
• VMware Tanzu Greenplum Command Center - multiple versions
• VMware Tanzu Greenplum Data Copy Utility - versions prior to 2.9.5
• VMware Tanzu Greenplum on Kubernetes - versions prior to 1.1.2
• VMware Tanzu Greenplum MCP Server - version prior to 1.0.2
• VMware Tanzu Greenplum Streaming Server - multiple versions
• VMware Tanzu Greenplum Text - versions prior to 4.0.2
• VMware Tanzu RabbitMQ - multiple versions
• VMware Tanzu RabbitMQ on Kubernetes - multiple versions
• VMware Tanzu RabbitMQ on Tanzu Platform - multiple versions

On 9^th July 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 150.0.4078.65.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 9^th July 2026, BDNCIRT issued an Advisory regarding AI-Branded Social Engineering, Phishing, and Malware Delivery Campaigns.

Review the Advisory AI-Branded Social Engineering, Phishing, and Malware Delivery Campaigns and take the necessary action.

On 8^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.114/115 (Windows/Mac), and 150.0.7871.114 (Linux).

Review the Google security bulletins and apply the required updates.

On 9^th July 2026, FreePBX published security advisories to address vulnerabilities in the following products:

• FreePBX API (FreePBX 17) - versions prior to 17.0.9
• FreePBX Backup (FreePBX 17) - versions prior to 17.0.11

• Authenticated API generatedocs Host Command Injection
• Authenticated Arbitrary SSH Key Injection via Backup Module
• FreePBX Security Advisories

On 3^rd February 2026, Django published a security advisory to address vulnerabilities in the following products:

• Django 4.2 - versions prior to 4.2.28
• Django 5.2 - versions prior to 5.2.11
• Django 6.0 - versions prior to 6.0.2

On 2^nd July 2026, Ubiquiti published security advisories to address vulnerabilities in the following products:

• EF-Core - version 5.1.18 and prior
• EFG - version 5.1.15 and prior
• ENVR - version 5.1.15 and prior
• ENVR-Core - version 5.1.15 and prior
• Express 7 - version 5.1.15 and prior
• UCG-Fiber - version 5.1.15 and prior
• UCG-Industrial - version 5.1.15 and prior
• UCG-Max - version 5.1.15 and prior
• UCG-Ultra - version 5.1.15 and prior
• UCK - version 5.1.15 and prior
• UCK-Enterprise - version 5.1.15 and prior
• UCKP - version 5.1.15 and prior
• UDM - version 5.1.15 and prior
• UDM-Beast - version 5.1.15 and prior
• UDM-Pro - version 5.1.15 and prior
• UDM-Pro - version 5.1.15 and prior
• UDM-Pro-Max - version 5.1.15 and prior
• UDM-SE - version 5.1.15 and prior
• UDR - version 5.1.15 and prior
• UDR-5G - version 5.1.15 and prior
• UDR7 - version 5.1.15 and prior
• UDW - version 5.1.15 and prior
• UNAS-2 - version 5.1.16 and prior
• UNAS-4 - version 5.1.16 and prior
• UNAS-Pro - version 5.1.16 and prior
• UNAS-Pro-4 - version 5.1.16 and prior
• UNAS-Pro-8 - version 5.1.16 and prior
• UniFi Access Application - version 4.2.28 and prior
• UniFi Network Application - version 10.3.58 and prior
• UniFi OS Server - version 5.1.15 and prior
• UniFi Protect Application - version 7.1.77 and prior
• UniFi Protect Floodlight - version 1.13.4 and prior
• UniFi Talk Application - version 5.1.2 and prior
• UNVR - version 5.1.15 and prior
• UNVR-G2 - version 5.1.15 and prior
• UNVR-G2-Pro - version 5.1.15 and prior
• UNVR-Instant - version 5.1.15 and prior
• UNVR-Pro - version 5.1.15 and prior

Review the Ubiquiti UniFi - Security Advisory Bulletin 066 and apply the necessary updates.

On 8^th July 2026, n8n published security updates to address vulnerabilities in the following products:

• n8n - versions prior to 1.123.64
• n8n - versions prior to 2.30.1
• n8n - versions prior to 2.29.8

Review the provided n8n Security and apply the necessary updates.

On 7^th July 2026, Tanium published security advisories to address vulnerabilities in the following products:

• Tanium Server 2025H1 Release - versions prior to Update MR21 (v7.7.3.8298)
• Tanium Server 2025H2 Release - versions prior to Update MR11 (v7.8.2.1198)
• Tanium Server 2026H1 Release - versions prior to Update MR3 (v7.8.4.1327)

Review the following advisories and apply the necessary updates:

• Tanium Security Advisories - TAN-2026-016
• Tanium Security Advisories

On 8^th July 2026, Palo Alto Networks published security advisories to address vulnerabilities in the following products:

• PAN-OS 12.1 - versions prior to 12.1.4-h8
• PAN-OS 12.1 - versions prior to 12.1.7-h2
• PAN-OS 12.1 - versions prior to 12.1.8
• PAN-OS 11.2 - versions prior to 11.2.4-h20
• PAN-OS 11.2 - versions prior to 11.2.7-h18
• PAN-OS 11.2 - versions prior to 11.2.10-h12
• PAN-OS 11.2 - versions prior to 11.2.13
• PAN-OS 11.1 - versions prior to 11.1.4-h35
• PAN-OS 11.1 - versions prior to 11.1.6-h35
• PAN-OS 11.1 - versions prior to 11.1.7.h8
• PAN-OS 11.1 - versions prior to 11.1.10-h30
• PAN-OS 11.1 - versions prior to 11.1.13-h9
• PAN-OS 11.1 - versions prior to 11.1.16
• PAN-OS 10.2 - versions prior to 10.2.7-h36
• PAN-OS 10.2 - versions prior to 10.2.10-h39
• PAN-OS 10.2 - versions prior to 10.2.13-h23
• PAN-OS 10.2 - versions prior to 10.2.16-h9
• PAN-OS 10.2 - versions prior to 10.2.18-h8
• Prisma Access 11.20.0 - versions prior to 11.2.7-h18
• Prisma Access 10.2.0 - versions prior to 10.2.10-h39
• Prisma Browser - versions prior to 149.10.3.53

Review the following advisories and apply the necessary updates:

• PAN-SA-2026-0010 Chromium: Monthly Vulnerability Update (July 2026)
• CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
• Palo Alto Network Security Advisories

On 8^th July 2026, Juniper Networks published a security advisory to address a critical vulnerability in the following products:

• Juniper cRPD - all versions
• Juniper CTPView - all versions
• Juniper Network Director - versions prior to 7.1R3
• Junos OS - multiple versions
• Junos OS Evolved - all versions
• Junos OS on MX Series with SPC3 and SRX Series - multiple versions
• Junos Space - all versions

Review the following Redis Security Advisory and apply the necessary updates:

• 2026-07 Security Bulletin: CTPView: Multiple vulnerabilities resolved in 9.3R2-3 Release
• 2026-07 Security Bulletin: Junos Space: Multiple vulnerabilities resolved in 26.1R1 Patch V1 Release
• 2026-07 Security Bulletin: Junos OS Evolved: URL handling vulnerability in libfetch results in heap buffer overflow (CVE-2020-7450)
• 2026-07 Security Bulletin: Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in a memory leak and eventual snmpd crash (CVE-2026-33799)
• Juniper Support Portal

On 8^th July 2026, Drupal published security advisories to address vulnerabilities in Location Selector - versions prior to 1.3.0.

Review the following Drupal Security Advisory and apply the necessary updates.

• Location Selector - Critical - SQL Injection - SA-CONTRIB-2026-072
• Drupal Security Advisories

On 8^th July 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) - versions prior to 19.1.2, 19.0.4 and 18.11.7
• GitLab Enterprise Edition (EE) - versions prior to 19.1.2, 19.0.4 and 18.11.7

Review the following advisories and apply the necessary updates: 

• GitLab Patch Release: 19.1.2, 19.0.4, 18.11.7
• GitLab Releases

On 8^th July 2026, Progress published a security update to address vulnerabilities in the following products.

• MOVEit Transfer - version 2024.1.8 and prior
• MOVEit Transfer - version 2025.0.0 to 2025.0.7
• MOVEit Transfer - version 2025.1.0 to 2025.1.3
• MOVEit Transfer - version 2026.0.0

Review the provided web links and apply the necessary updates.

• MOVEit Transfer Critical Security Bulletin - June 2026 – (CVE-2026-10699, CVE-2026-10698, CVE-2026-11903)
• Progress Trust Center

On 7^th July 2026, BDNCIRT issued an Advisory regarding FortiBleed Campaign Exposes FortiGate Devices in Bangladesh with Credential Compromise.

Review the Advisory FortiBleed Campaign Exposes FortiGate Devices in Bangladesh with Credential Compromise and take the necessary action.

On 6^th July 2026, Android published a security bulletin to address vulnerabilities affecting Android devices.

Review the Android Security Bulletin and apply the necessary updates.

On 6^th July 2026, VMware published security advisories to address vulnerabilities in VMware Tanzu for MySQL on Kubernetes - versions prior to 2.0.4.

Review the following advisories and apply the necessary updates:

• Product Release Advisory - VMware Tanzu for MySQL on Kubernetes 2.0.4
• Security Advisories - VMware Cloud Foundation

On 7^th July 2026, Samsung published a security advisory to address vulnerabilities in Samsung mobile devices - versions prior to the SMR-JUL-2026 Release 1.

Review the Samsung Security Updates and apply the necessary updates.

On 7^th July 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Django 5.2 - versions prior to 5.2.16
• Django 6.0 - versions prior to 6.0.7

Review the Django Security Advisory and apply the necessary updates.

On 7^th July 2026, Zimbra published security advisories to address vulnerabilities in Zimbra Daffodil - versions prior to v10.1.17.

Review the following Zimbra Security Advisory and apply the necessary updates:

• Patch Release Update: Zimbra 10.1.19
• Zimbra Patch Release Updates

On 7^th July 2026, HPE published security advisories to address vulnerabilities in HPE Aruba Networking Private 5G Core - 1.26.1.0 and prior.

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05077 rev.1 - HPE Networking Private 5G Core, Multiple vulnerabilities
• HPE Security Bulletin Library

On 7^th July 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.100/.101 (Windows/Mac), and 150.0.7871.100 (Linux).

Review the Google security bulletins and apply the required updates.

On 30^th June 2026, Adobe published security advisories to address critical vulnerabilities in the following products:

• Adobe ColdFusion 2025 - Update 9 and prior
• Adobe ColdFusion 2023 - Update 20 and prior
• Adobe Campaign Classic - version ACC v7: 7.4.3 build 9396 and prior

Open-source reporting indicates that CVE-2026-48282 is being exploited.

On 7^th July 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-48282 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates.

• Security update available for Adobe ColdFusion | APSB26-68
• Security updates available for Adobe Campaign Classic | APSB26-69
• Adobe Security Advisories
• CISA KEV: CVE-2026-48282

Between 29^th June and 5^th July 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

Between 29^th June and 5^th July 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 14.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10
• Ubuntu 26.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 29^th June and 5^th July 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell Cyber Recovery - versions prior to 20.1.0.0
• Dell Data Protection Advisor - versions 19.9 to 19.12 SP2
• Dell Networker - versions prior to 8.0.29
• Dell Networker - versions prior to 17.0.5
• Dell OpenManage Enterprise Modular - versions prior to 20.20.20
• Dell PowerProtect Cyber Recovery - versions prior to cyber-recovery-osupdate-15.4.0-18.bin
• Dell PowerProtect Data Manager Appliance DM5500 - versions prior to 5.20.1.0
• SupportAssist for Business PCs - versions prior to 5.1.1.3567
• SupportAssist for Home PCs - versions prior to 5.0.2.2900

Review the provided Dell Security Advisory and apply the necessary updates.

On 5^th July 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Roundcube Webmail - versions prior to 1.6.17
• Roundcube Webmail - versions prior to 1.7.2

Review the following advisories and apply the necessary updates:

• Security updates 1.6.17 and 1.7.2 released
• Roundcube Webmail 1.6.17
• Roundcube Webmail 1.7.2
• Roundcube Open Source Webmail Software

On 6^th July 2026, OpenSSH published a security advisory to address vulnerabilities in OpenSSH - versions prior to 10.4.

Review the following OpenSSH Security Advisory and apply the necessary updates:

• OpenSSH 10.4 Release Notes  
• OpenSSH

On 2^nd July 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 150.0.4078.48.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 21^st June 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Remote Support - version 25.3.2 and prior
• Privileged Remote Access - version 25.3.2 and prior

Review the following advisories and apply the necessary updates:

• BeyondTrust Security Advisory - Advisory ID: BT26-03
• BeyondTrust Advisories

On 21^st June 2026, Roundcube published security advisories to address vulnerabilities in the following products:

• Remote Support - version 25.3.2 and prior
• Privileged Remote Access - version 25.3.2 and prior

Review the following advisories and apply the necessary updates:

• BeyondTrust Security Advisory - Advisory ID: BT26-03
• BeyondTrust Advisories

Between 29^th June and 5^th July 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• Automation Assets in IBM Cloud Pak for Integration (CP4I) - multiple versions
• HMC V10.3.1050.0 - versions V10.3.1050.0 to V10.3.1064.0
• HMC V11.1.1110.0 - versions V11.1.1110.0 to V11.1.1111.5
• IBM Bob - versions 1.0.0, 1.0.1 and 1.0.2
• IBM App Connect Operator - multiple versions
• IBM App Connect Enterprise Certified Containers Operands - multiple versions
• IBM Business Automation Insights - multiple versions
• IBM Business Automation Manager Open Editions - versions 9.0.0 to 9.4.2
• IBM Business Automation Workflow traditional - multiple versions
• IBM Business Automation Workflow Enterprise Service Bus - multiple versions
• IBM Cloud Pak for Business Automation - multiple versions
• IBM DataPower Gateway - multiple models and versions
• IBM DataStax Enterprise - versions 6.9.0 to 6.9.22
• IBM Db2 Genius Hub – versions 1.1, 1.1.1 and 1.1.2
• IBM EntireX - version 11.1
• IBM Event Endpoint Management - versions 11.0.0 to 11.7.4
• IBM Integrated Analytics System - versions 1.0.0.0 to 1.0.30.0
• IBM Library Support for Spring - version 2.7
• IBM Quantum Safe Remediator - versions 1.1 to 1.1.2
• IBM Rational ClearQuest - versions 9.1 to 9.1.0.11 and 10.0 to 10.0.10
• IBM SPSS Modeler - version 19.0.0.0
• IBM Tivoli Monitoring - versions 6.3.0.7 to 6.3.0.7 Service Pack 22
• IBM Tivoli Netcool Configuration Impact - version 7.1.1
• IBM Tivoli Netcool Configuration Manager - versions 6.4.2 GA to 6.4.2.24
• IBM Tivoli System Automation Application Manager - version 4.1
• IBM webMethods Integration (on prem) - versions 10.15 and 10.11
• Langflow OSS - versions 1.0.0 to 1.10.0
• Maximo AI Service - version 9.1.0
• Platform Navigator in IBM Cloud Pak for Integration (CP4I) - multiple versions
• PowerVM Novalink - multiple versions
• WebSphere Application Server - versions 8.5 and 9.0

Review the IBM Security Advisory and apply the necessary updates.

On 5^th July 2026, BDNCIRT issued an Advisory regarding INC Ransomware Expands Cross-Platform Capabilities Targeting Enterprise and Mainframe Infrastructure Across the Asia-Pacific Region.

Review the Advisory INC Ransomware Expands Cross-Platform Capabilities Targeting Enterprise and Mainframe Infrastructure Across the Asia-Pacific Region and take the necessary action.

On 2^nd July 2026, WatchGuard published a security advisory to address vulnerabilities in the following products:

• Fireware OS 2025.1 - version 2026.2 and prior
• Fireware OS 11.x - version 11.12.4_Update1 and prior
• Fireware OS 12.0 - version 12.12 and prior
• Fireware OS 12.5 - version 12.5.18 and prior
• Mobile VPN with SSL client for Windows - version 2026.2 and prior

• WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication
• WatchGuard Mobile VPN with SSL Windows Client Local Privilege Escalation
• WatchGuard Security Advisories

On 30^th June 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitHub Enterprise Server - versions 3.21.x prior to 3.21.2
• GitHub Enterprise Server - versions 3.20.x prior to 3.20.4
• GitHub Enterprise Server - versions 3.19.x prior to 3.19.8
• GitHub Enterprise Server - versions 3.18.x prior to 3.18.11
• GitHub Enterprise Server - versions 3.17.x prior to 3.17.17

Review the following advisories and apply the necessary updates: 

• Enterprise Server 3.21.2
• Enterprise Server 3.20.4
• Enterprise Server 3.19.8
• Enterprise Server 3.18.11
• Enterprise Server 3.17.17

On 1^st July 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Cisco Catalyst Center Release 2.3.7 - versions prior to 2.3.7.11-VA GSMU100
• Cisco Catalyst Center Release 3.1 - versions prior to 3.1.6 GSMU200
• Secure Endpoint Connector - multiple versions and platforms

• Cisco Catalyst Center Arbitrary File Read Vulnerability
• ClamAV Vulnerabilities Affecting Cisco Products: July 2026
• Cisco Security Advisories

On 30^th June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 150.0.7871.46/47 (Windows/Mac), and 150.0.7871.46 (Linux).

Review the Google security bulletins and apply the required updates.

On 30^th June 2026, Adobe published security advisories to address critical vulnerabilities in the following products:

• Adobe ColdFusion 2025 - Update 9 and prior
• Adobe ColdFusion 2023 - Update 20 and prior
• Adobe Campaign Classic - version ACC v7: 7.4.3 build 9396 and prior

• Security update available for Adobe ColdFusion | APSB26-68
• Security updates available for Adobe Campaign Classic | APSB26-69
• Adobe Security Advisories

On 26th June 2026, SimpleHelp published a security update to address vulnerabilities in the following products:

• SimpleHelp - versions 5.5.0 to versions prior to 5.5.16
• SimpleHelp - versions 6.0 to versions prior to 6.0 RC2

Review the provided web links and apply the necessary updates.

• SimpleHelp 5.5 and 6.0 Security Fix
• SimpleHelp Release News
• CISA KEV: CVE-2026-48558

On 23rd June 2026, wolfSSL published a security update to address vulnerabilities in wolfSSL - versions prior to 5.9.2.

Review the provided web links and apply the necessary updates.

• wolfSSL Release 5.9.2 (23^rd 2026)
• wolfSSL

On 30^th June 2026, Mozilla published security advisories to address vulnerabilities in Firefox - versions prior to 152.04

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-62
• Mozilla Security Advisories

On 30^th June 2026, Citrix published security advisories to address vulnerabilities in the following products:

• NetScaler ADC and NetScaler Gateway - versions 14.1 before 14.1-72.61
• NetScaler ADC and NetScaler Gateway - versions 13.1 before 13.1-63.18
• NetScaler ADC FIPS - versions before 14.1-72.61 FIPS
• NetScaler ADC FIPS and NDcPP - versions before 13.1-37.272

Review the following advisories and apply the necessary updates:

• NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474
• Citrix Security Advisories

Between 22^nd and 28^th June 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 26.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 22^nd and 28^th June 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

Between 22^nd and 28^th June 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell PowerProtect Data Manager Appliance DM5510 - versions prior to 20.1.0.0
• Dell Networking OS10 - versions prior to 10.6.1.2
• Dell Private Cloud, Nutanix - versions prior to 01.02.00.00
• PowerSwitch Z9864F-ON - versions prior to 3.5.0
• Dell AX System for Azure - versions prior to 2606
• Dell OpenManage Enterprise Modular - versions prior to 2.20.20
• Dell iDRAC10 - versions prior to 1.30.10.51

Review the provided Dell Security Advisory and apply the necessary updates.

Between 22^nd and 28^th June 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• IBM Cloud Pak System - version 2.3.5.0
• IBM Observability with Instana (Agent) - versions Build 1.0.303 to 1.0.319
• IBM Db2 Big SQL on Cloud Pak for Data - version 5.0
• IBM Db2 Big SQL on IBM Software Hub - multiple versions
• IBM Engineering Workflow Management - version 7.2, 7.1 and 7.0.3
• IBM Engineering Requirements Management DOORS Next - version 7.2, 7.1 and 7.0.3
• Global Configuration Management - version 7.2, 7.1 and 7.0.3
• Jazz Foundation - version 7.2, 7.1 and 7.0.3
• Langflow OSS - version 1.0.0 to 1.10.0
• IBM Engineering Test Management - version 7.2, 7.1 and 7.0.3
• IBM InfoSphere Information Server - version 11.7.0.0 to 11.7.1.6
• IBM Operator for PostgreSQL - version v28.3.0 to v28.3.2
• IBM Spectrum Control - multiple versions
• IBM Sterling Partner Engagement Manager Essentials Edition - multiple versions
• IBM Sterling Partner Engagement Manager Standard Edition - multiple versions
• IBM Storage Defender Copy Data Management - version 2.2.0.0 to 2.3.0.1
• IBM Storage Protect Plus File Systems Agent - version 10.1.6 to 10.1.18
• IBM Storage Protect Plus Guest Applications - version 10.1.6 to 10.1.18
• IBM Storage Protect Plus vSnap - version 10.1 to 10.1.18
• IBM Storage Protect Plus Server - version 10.1 to 10.1.18
• IBM Storage Sentinel Anomaly Scan Engine - version 1.1.0 to 2.3.0
• IBM watsonx Orchestrate Developer Edition - version 1.4.0 to 2.11.0
• WatsonX BI - version 5.0 to 5.3
• WebSphere Service Registry and Repository - version 8.5

Review the IBM Security Advisory and apply the necessary updates.

On 26^th June 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 149.0.4022.98.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 29^th May 2026, Oracle published a security advisory to address critical vulnerabilities in the following products:

• Oracle Communications Unified Assurance - versions 6.1.1 to 7.0.0
• Oracle Database Server - versions 23.4.0 to 23.26.2
• Oracle E-Business Suite - versions 12.2.3 to 12.2.15
• Oracle Hospitality OPERA 5 Property Services - versions 5.6.19.24, 5.6.22, 5.6.25.19, 5.6.27.6 and 5.6.28
• Oracle REST Data Services - versions 24.2.0 to 26.1.0

Open-source reporting indicates that CVE-2026-46817 is being exploited.

Review the provided web links and perform the suggested mitigations.

• Oracle Critical Security Patch Update Advisory - May 2026
• Oracle Critical Patch Updates, Security Alerts and Bulletins

On 29^th June 2026, Apple published a security update to address vulnerabilities in the following products:

• iOS and iPadOS - versions prior to 26.5.2
• macOS Tahoe - versions prior to 26.5.2

Review the provided web links and apply the necessary updates.

• About the security content of iOS 26.5.2 and iPadOS 26.5.2
• About the security content of macOS Tahoe 26.5.2
• Apple security releases

On 25^th June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 149.0.7827.200/201 (Windows/Mac), and 149.0.7827.200 (Linux).

Review the Google security bulletins and apply the required updates.

On 24^th June 2026, Drupal published security advisories to address vulnerabilities in the following products:

• Geolocation Field - versions prior to 3.15.0
• WissKI - versions prior to 4.2.0

• Geolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-062
• WissKI - Critical - Access bypass - SA-CONTRIB-2026-059
• Drupal Security Advisories

Between 24^th and 25^th June 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Unified Correlation Analyzer (UCA) - versions prior to 4.4.10
• HPE Telco Service Orchestrator - versions prior to v5.6.1

• HPESBNW05073 rev.1 - HPE Telco Unified Correlation and Automation (UCA), Multiple Vulnerabilities
• HPESBNW05070 rev.1 - HPE Telco Service Orchestrator Software, Multiple Vulnerabilities
• HPE Security Bulletin Library

On 23^rd June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 149.0.7827.196/197 (Windows/Mac), and 149.0.7827.196  (Linux).

Review the Google security bulletins and apply the required updates.

On 23^rd May 2026, Tenable released security updates to address vulnerabilities in Tenable Identity Exposure - versions prior to. 3.93.4.

Review the following Tenable Security Advisory and apply the necessary updates:

• [R1] Tenable Identity Exposure Version 3.93.5 Fixes Multiple Vulnerabilities
• Tenable Product Security Advisories

On 24^th June 2026, n8n published security updates to address vulnerabilities in the following products:

• n8n - versions prior to 2.28.1
• n8n - versions prior to 2.27.4
• n8n - versions prior to 1.123.61

Review the following n8n Security Advisory and apply the necessary updates.

• "Allowed HTTP Request Domains" Restriction Bypass via AI Agents MCP Connector
• Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration
• Cross-Issuer Token Exchange Account Binding via Subject-Only Identity Resolution
• Shared Credential Header Leak via HTTP Request Pagination Expression
• n8n Security

On 24^th June 2026, Jenkins published a security advisory to address vulnerabilities in the following products:

• Assembla Plugin - versions prior to 1.4
• External Workspace Manager Plugin - versions prior to 1.3.2
• OWASP ZAP Plugin - versions prior to 1.0.7
• Script Security Plugin - versions prior to 1402.v94c9ce464861

Review the following advisories and apply the necessary updates:

• XXE vulnerability in Assembla Plugin
• Path traversal vulnerability in External Workspace Manager Plugin
• Builds executed on the Jenkins controller by OWASP ZAP Plugin can lead to RCE
• Script security bypass vulnerability in Script Security Plugin
• Sandbox bypass vulnerability in Script Security Plugin
• Jenkins Security Advisories

On 24^th June 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) - versions prior to 19.1.1, 19.0.3 and 18.11.6
• GitLab Enterprise Edition (EE) - versions prior to 19.1.1, 19.0.3 and 18.11.6

Review the following advisories and apply the necessary updates: 

• GitLab Patch Release: 19.1.1, 19.0.3, 18.11.6
• GitLab Releases

Between 22^nd and 23^rd June 2026, VMware published security advisories to address vulnerabilities in the following products:

• VMware Tanzu Data Flow on Kubernetes - versions prior to 2.1.3
• VMware Tanzu Greenplum Backup and Restore - versions prior to 1.33.2
• VMware Tanzu Greenplum Platform Extension Framework - versions prior to 8.0.1
• VMware Tanzu RabbitMQ on Kubernetes - versions prior to 3.13.17
• VMware Tanzu RabbitMQ on Kubernetes - versions prior to 4.0.22
• VMware Tanzu RabbitMQ on Kubernetes - versions prior to 4.1.13
• VMware Tanzu RabbitMQ on Kubernetes - versions prior to 4.2.8
• VMware Tanzu RabbitMQ on Kubernetes - versions prior to 4.3.2
• VMware Tanzu GemFire - versions prior to 10.1.8
• VMware Tanzu RabbitMQ - versions prior to 3.13.17
• VMware Tanzu RabbitMQ - versions prior to 4.0.22
• VMware Tanzu RabbitMQ - versions prior to 4.1.13
• VMware Tanzu RabbitMQ - versions prior to 4.2.8
• VMware Tanzu RabbitMQ - versions prior to 4.3.2
• VMware Tanzu Greenplum - versions prior to 6.33.2
• VMware Tanzu Greenplum - versions prior to 7.8.2

Review the Security Advisories - Tanzu and apply the necessary updates.

Between 15^th and 21^th June 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• Content-Aware Storage - versions 1.0.0 to 1.1.3
• DataStage on Cloud Pak for Data - versions prior to 5.3.1.0
• Decision Optimization for Cloud Pak for Data - versions 5.0 to 5.3.1 - Patch 4 releases
• Host On-Demand (HOD) - versions 16.0 to 16.0.1, versions 15.0 to 15.0.4
• IBM ApplinX - versions prior to 11.1 and 12.1
• IBM Cloud Pak for Data System (CPDS) - versions 1.0.0.0 to 1.0.10.0
• IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data - multiple versions
• IBM Engineering Lifecycle Management on Hybrid Cloud - versions 1.0.0 to 1.3.0
• IBM Enterprise Build of Quarkus - versions 3.27.1 to 3.27.4, versions 3.33.1 to 3.33.2
• IBM EntireX - versions prior to 11.1
• IBM Fusion HCI - versions 2.10.0 to 2.12.1
• IBM Fusion - versions 2.9.0 to 2.12.1
• IBM Guardium Key Lifecycle Manager (SKLM/GKLM) - versions prior to 4.1
• IBM HTTP Server - versions prior to 9.0 and 8.5
• IBM MQ Operator - multiple versions
• IBM Netezza Software - versions prior to 11.3.0.3-IF2
• IBM Operational Decision Manager - multiple versions
• IBM Planning Analytics Local - versions 2.1.0 to 2.1.20
• IBM Robotic Process Automation for Cloud Pak - multiple versions
• IBM Security QRadar Log Management AQL Plugin - versions 1.0.0 to 1.1.5
• IBM Sterling Connect:Direct Web Services - versions 6.3.0 to 6.3.0.18
• IBM Sterling Connect:Direct Web Services - versions 6.4.0 to 6.4.0.7
• IBM Tivoli Netcool Configuration Manager - versions 6.4.2 GA to 6.4.2.24
• IBM Watson Speech Services Cartridge - versions 4.0.0 to 5.3.1
• IBM supplied MQ Advanced container images - multiple versions
• IBM webMethods BPM - versions prior to 12.1 and 11.1
• ICP - Discovery - versions 5.0.0 to 5.3.1
• Langflow OSS - versions 1.0.0 to 1.9.3
• MongoDB Enterprise Advanced with IBM - versions Ops-Manager 8.0.0 to 8.0.21
• MongoDB Enterprise Advanced with IBM - versions migrator 1.0.0 to 1.15.9
• QRadar - versions prior to 7.5.0
• UCD - IBM DevOps Deploy - versions 8.0 to 8.0.1.13, versions 8.1 to 8.1.2.6
• UCD - IBM UrbanCode Deploy - versions 7.2 to 7.2.3.23, versions 7.3 to 7.3.2.18
• WebSphere Application Server - versions prior to v9.0.5.5
• voice-gateway/sip-orchestrator - versions prior to 1.0.8.26

Review the IBM Security Advisory and apply the necessary updates.

Between 15^th and 21^st June 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 16.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 15^th and 21^st June 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell Container Storage Modules - multiple versions
• Dell Data Protection Central - versions 19.10 to 19.12 with Data Protection Central OS Update prior to dpc-osupdate-1.1.27-1
• Dell PowerFlex Custom Node - multiple versions
• Dell PowerFlex Software - versions prior to 4.5.5.2
• Dell PowerFlex Software - versions prior to 5.1.0.1
• Dell Private Cloud - Red Hat - versions prior to 01.04.00.00
• Dell VxFlex Ready Node - versions prior to 2.25.0
• Dell VxRail Appliance - versions prior to 9.1.000
• PowerProtect DB - versions prior to 2.7.9 with Data Protection Central OS Update prior to dpc-osupdate-1.1.27-1

Review the provided Dell Security Advisory and apply the necessary updates.

Between 15^th and 21^st June 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

On 18^th June 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 149.0.4022.80.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

On 19^th June 2026, JetBrains published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products:

• JetBrains YouTrack - multiple versions
• JetBrains Hub - multiple versions

Review the JetBrains – Fixed security issues and apply the necessary updates.

On 18^th June 2026, Node.js issued security bulletins to address vulnerabilities related to the following products:

• js 22 - versions prior to v22.23.0;
• js 24 - versions prior to v24.17.0;
• js 26 - versions prior to v26.3.1.

Review the web pages below and apply the necessary updates.

• Nodejs - Thursday, 18^th June, 2026 Security Releases
• Nodejs Releases

On 10^th June 2026, Splunk published security advisories to address vulnerabilities in the following products:

• Splunk SOAR - versions prior to 8.5.0
• Splunk Enterprise - multiple versions and platforms
• Splunk Cloud Platform - multiple versions and platforms

• Splunk Security Advisories
• CISA KEV: CVE-2026-20253

On 17^th June 2026, Drupal published security advisories to address vulnerabilities in the following products:

• Drupal core - multiple versions
• Plotly.js Graphing - versions prior to 3.0.2
• Flag attendance field - versions prior to 8.x-1.2
• Formatter Field - versions prior to 2.0.0

The Cybersecurity and Infrastructure Security Agency (CISA) is aware of global reports that malicious cyber actors have targeted internet-accessible Fortinet devices across government and private sector organizations using compromised credentials. This activity, referred to as FortiBleed, involves the exposure of leaked credentials associated with approximately 74,000 Fortinet devices, including firewalls and virtual private network (VPN) gateways.

To defend against this malicious cyber activity, CISA urges impacted Fortinet customers with FortiGate appliances and associated Secure Sockets Layer (SSL) VPN gateways to immediately:

1. Terminate sessions and reset credentials. Terminate all active SSL VPN and administrative sessions. Reset all Fortinet VPN and administrative passwords, especially on internet-facing systems, and enforce strong password policies.
2. Ensure secure credential storage. Confirm your organization's use of the Password-Based Key Derivation Function 2 (PBKDF2) algorithm to store administrator credentials and remove weaker legacy hashes per Fortinet's guidance (see, Fortinet's Technical Tip: Enforcing PBKDF2 as hash function for administrator accounts in FortiOS v7.2.11 and later).
3. Review logs. Review firewall, VPN, authentication, and domain controller logs for lateral movement, unusual access, suspicious accounts, or unauthorized configuration changes.
4. Enable phishing-resistant multifactor authentication (MFA). Require phishing-resistant MFA on all remote access and administrative accounts and ensure it is enforced on all external gateways and administrative interfaces.
5. Reduce the attack surface and lock down management access. Ensure the administration of your firewall is inaccessible from the public internet; restrict Fortinet management interfaces to trusted internal networks; and remove or disable any unauthorized or unnecessary accounts.

See the following resources to determine your organization's potential impact and find additional guidance on the credentials compromised:

• Tech Times: Fortinet FortiGate Credential Leak Hits 73,932 Firewalls: Half the Internet-Facing Fleet
• SOCRadar: FortiBleed: The Compromise of 80,000+ Fortinet Firewalls
• Hudson Rock: FortiBleed: 75,000 Fortinet Firewalls Compromised: Global Enterprises Exposed - Claim Your Ethical Disclosure
• Arctic Wolf: Active FortiBleed Campaign Impacting Fortinet Devices Across 194 Countries
• Fortinet: Attacks at the Speed of AI

On 16^th June 2026, Oracle published a security advisory to address vulnerabilities in multiple products. Included were critical updates for the following: 

• APM - Application Performance Management
• Identity Manager
• Identity Manager Connector
• JD Edwards EnterpriseOne Accounts Payable
• JD Edwards EnterpriseOne General Ledger
• JD Edwards EnterpriseOne Human Resources Management
• JD Edwards EnterpriseOne Order Promising
• JD Edwards EnterpriseOne Project Costing
• JD Edwards EnterpriseOne Tools
• MySQL Cluster
• MySQL NDB Cluster
• MySQL Router
• MySQL Server
• MySQL Shell
• Oracle Access Manager
• Oracle Agile PLM
• Oracle Application Development Framework (ADF)
• Oracle Coherence
• Oracle Communications Convergent Charging Controller
• Oracle Communications Network Charging and Control
• Oracle Communications Network Integrity
• Oracle Data Integrator
• Oracle E-Business Suite
• Oracle Enterprise Manager Base Platform
• Oracle GoldenGate
• Oracle Solaris
• Oracle Unified Directory
• Oracle VM VirtualBox
• Oracle Virtual Directory
• Oracle WebCenter Content
• Oracle WebCenter Enterprise Capture
• Oracle WebCenter Portal
• Oracle WebCenter Sites
• PeopleSoft Enterprise CS Campus Community
• PeopleSoft Enterprise CS Student Financials
• PeopleSoft Enterprise PT PeopleTools
• Siebel Applications
• WebCenter Content: Imaging
• WebLogic Server

Review Oracle Critical Patch Update Advisory - June 2026 and apply the necessary updates.

On 16^th June 2026, JetBrains published security advisories to address JetBrains GoLand - versions prior to 2026.1.3.

Review the JetBrains - Fixed security issues and apply the necessary updates.

On 16^th June 2026, Microsoft published a security update to address vulnerabilities in the Microsoft Malware Protection Engine.

Review the Microsoft Defender Elevation of Privilege Vulnerability (CVE-2026-50656) and apply the necessary updates.

On 16^th June 2026, Atlassian published security advisories to address vulnerabilities in the following products:

• Bamboo Data Center and Server - multiple versions
• Bitbucket Data Center and Server - multiple versions
• Confluence Data Center and Server - multiple versions
• Crowd Data Center and Server - multiple versions
• Fisheye/Crucible - versions 4.9.0 to 4.9.10
• Jira Data Center and Server - multiple versions
• Jira Service Management Data Center and Server - multiple versions

Review the following advisories and apply the necessary updates: 

• Security Bulletin - 16^th June 2026
• Atlassian Security Advisories and Bulletins

On 16^th June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 149.0.7827.155/.156 (Windows/Mac), and 149.0.7827.155 (Linux).

Review the Google security bulletins and apply the required updates.

On 17^th June 2026, Veeam published security advisories to address vulnerabilities in the following products:

• MiCollab - multiple versions
• MiVoice Business Solution Virtual Instance (MiVB SVI) - version 2.1.0.9-2 and prior

Review the following advisories and apply the necessary updates:

• Mitel Product Security Advisory MISA-2026-0005
• Mitel Security Bulletins

On 17^th June 2026, F5 published Quarterly Security Notifications for multiple products. Included were updates for the following:

• F5 DoS for NGINX - version 4.9.0
• F5 WAF for NGINX Instance Manager - versions 5.9.0 to 5.13.1
• NGINX App Protect DoS - versions 4.3.0 to 4.7.0
• NGINX App Protect WAF - versions 5.2.0 to 5.8.0 and 4.10.0 to 4.16.0
• NGINX Open Source - versions 1.30.0 to 1.30.2 and 1.31.0 to 1.31.1
• NGINX Instance Manager - versions 2.17.0 to 2.22.0
• NGINX Gateway Fabric - multiple versions
• NGINX Ingress Controller - multiple versions
• NGINX Plus - version 37.0.0 R33 to 37.01 R36

Review the following F5 Security Advisory and apply the necessary updates.

• K000161614: Out-of-band Security Notification (17^th June 2026)
• MyF5

On 17^th June 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

Cisco ISE (Identity Services Engine) and Cisco ISE-PIC (Passive Identity Connector)

• Cisco ISE and ISE-PIC Releases prior to 3.3 - all versions
• Cisco ISE and ISE-PIC Release 3.3 - versions prior to 3.3 Patch 11
• Cisco ISE and ISE-PIC Release 3.4 - versions prior to 3.4 Patch 6
• Cisco ISE and ISE-PIC Release 3.5 - versions prior to 3.5 Patch 4 (August 2026)

Review the following advisories and apply the necessary updates: 

• Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities
• Cisco Security Advisories

On 17^th June 2026, Splunk published a security update to address vulnerabilities in the Splunk AI Toolkit - versions prior to 5.7.4.

Review the following advisories and apply the necessary updates: 

• OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit
• Splunk Security Advisories

On 14^th April 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• FortiSandbox 4.4 - versions 4.4.0 to 4.4.8
• FortiSandbox 5.0 - versions 5.0.0 to 5.0.5
• FortiAnalyzer Cloud 7.6 - versions 7.6.2 to 7.6.4
• FortiManager Cloud 7.6 - versions 7.6.2 to 7.6.4
• FortiDDoS-F 7.2 - versions 7.2.1 to 7.2.2

Update 1

Open-source reporting indicates that CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 have been exploited.

Review the provided web links and apply the necessary updates.

• OS Command Injection through API endpoint
• Unauthenticated Authentication bypass and Privilege escalation in FortiSandbox
• Heap-based buffer overflow in oftpd daemon
• SQL Injection via API
• Fortinet PSIRT Advisories

On  16^th June 2026, Zyxel published security advisories to address vulnerabilities in GS1900 series switches - multiple versions and models

Review the following advisories and apply the necessary updates:

• Zyxel security advisory for stack-based buffer overflow vulnerability in GS1900 series switches
• Zyxel Advisories

On 16^th June 2026, Mozilla published security advisories to address vulnerabilities in the following products:

• Firefox - versions prior to 152
• Firefox for iOS - versions prior to 152
• Firefox EST - versions prior to 140.12
• Firefox ESR - versions prior to 115.37

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-59
• Mozilla Foundation Security Advisory 2026-58
• Mozilla Foundation Security Advisory 2026-57
• Mozilla Foundation Security Advisory 2026-56
• Mozilla Security Advisories

Between 8^th and 14^th June 2026, IBM published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following products

• IBM Aspera Shares - versions 1.9.9 to 1.11.2
• IBM Automation Decision Services - multiple versions
• IBM Cloud Pak for Applications - multiple versions
• IBM Cloud Pak for Data System (CPDS) - versions 1.0.0.0 to 1.0.10.0
• IBM DevOps Code ClearCase -version 11.0
• IBM Enterprise Application Runtimes - versions 1.0 and 1.1
• IBM Enterprise Build of Quarkus - versions 3.27.0 to 3.27.3.SP2
• IBM Event Processing - versions 1.5.0 to 1.5.2
• IBM Guardium Key Lifecycle Manager (SKLM/GKLM) - version 4.1
• IBM Maximo Scheduler Optimization - multiple versions
• IBM Observability with Instana (OnPrem) - versions Build 1.0.285 to 1.0.317
• IBM Process Automation Manager Open Edition Starter Kit for Banking - version 9.3.1
• IBM Rational ClearCase - version 10.0.0
• IBM Rational ClearCase - version 9.1
• IBM Rational ClearQuest - versions 9.1 to 9.1.0.11, versions 10.0 to 10.0.10
• IBM Rational Developer for i (RDi) - version 9.9
• IBM Software Support App (iOS) - versions 4.0.0 to 4.0.1
• IBM Software Support app (Android) - versions 4.0.0 to 4.0.1
• IBM Tivoli Monitoring - versions 6.3.0.7 to 6.3.0.7 Service Pack 22
• IBM Tivoli Network Manager IP Edition - versions 4.2 GA to 4.2.0.24
• IBM Verify Identity Access Digital Credentials - versions 24.06 to 26.03
• IBM WebSphere Application Server Liberty - versions 17.0.0.3 to 26.0.0.5
• IBM WebSphere Application Server - multiple versions
• IBM WebSphere Hybrid Edition - version 5.1
• IBM i - multiple versions
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - versions 4.8.4 to 4.8.5
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - versions 5.0.0 to 5.3.2
• IBM watsonx Orchestrate Developer Edition - versions 1.4.0 to 2.10.0
• ICP - Discovery - versions 5.0.0 to 5.3.1
• Langflow OSS - versions 1.0.0 to 1.8.4
• SPSS Collaboration and Deployment Services - multiple versions
• Technical Support Appliance - multiple versions

Review the IBM Security Advisory and apply the necessary updates.

Between 8^th and 14^th June 2026, Dell published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Dell NativeEdge Orchestrator - versions prior to 4.2.0.0
• iDRAC Tools - versions prior to 11.4.1.0
• PowerEdge - multiple versions
• PowerScale - multiple versions
• PowerStore - multiple versions

Review the following advisories and apply the necessary updates:

• DSA-2026-273: Dell PowerStore T Security Update for Multiple Vulnerabilities
• DSA-2026-256: Security Update for Dell Native Edge Orchestrator (EO)
• DSA-2026-237: Security Update for Dell PowerScale OneFS Multiple Third-Party Component Vulnerabilities
• Dell Security advisories and notices

Between 8^th and 15^th June 2026, Ubuntu published a security notice to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS

Review the Ubuntu Security Notices and apply the necessary updates.

Between 8^th and 14^th June 2026, Red Hat published security advisories addressing vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder - multiple versions and platforms
• Red Hat Enterprise Linux - multiple versions and platforms
• Red Hat Enterprise Linux Server - multiple versions and platforms
• Red Hat Enterprise Linux for Real Time - multiple versions and platforms

Review the Red Hat Security Advisory and apply the necessary updates.

On 4^th June 2026, Cisco published security advisories to address vulnerabilities in Cisco Catalyst SD-WAN Manager - multiple versions and all deployment types.

On 15^th June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20262 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates, when available.

• Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability (CVE-2026-20262)
• Cisco Security Advisories
• CISA KEV: CVE-2026-20262

On 9^th June 2026, Microsoft published a security update to address vulnerabilities in the Edge Stable Channel - versions prior to 1 49.0.4022.62.

Microsoft has indicated that CVE-2026-11645 has an available exploit.

Review the Microsoft Edge Stable Channel Release Notes and apply the necessary updates.

Between 10 and 11^th June 2026, Spring published security advisories to address vulnerabilities in the following products:

• Spring Cloud Sleuth - versions 3.1.0 to 3.1.13
• Spring Statemachine - multiple versions
• Spring Cloud Gateway - multiple versions
• Spring Integration - multiple versions
• Spring for GraphQL - multiple versions

Review the Spring Security Advisories and apply the necessary updates.

On 10^th June  2026, Oracle published a security advisory to address a critical vulnerability in PeopleSoft Enterprise PeopleTools – versions 8.61 and 8.62.

Open-source reporting indicates that CVE-2026-35273 is being exploited in the wild.

Update 1

On 12^th June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-35273 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and perform the suggested mitigations.

• Oracle Security Alert Advisory - CVE-2026-35273
• Oracle Critical Patch Updates, Security Alerts and Bulletins
• CISA KEV: CVE-2026-35273

On 11^th June  2026, GeoServer published a security advisory to address vulnerabilities in the following products:

• GeoServer - versions prior to 3.0.0
• GeoTools - versions prior to 35.0
• GeoWebCache - versions prior to 2.0.0

Review the provided web links and apply the necessary updates:

• GeoServer 3.0.0 Release
• GeoServer

On 12^th June 2026, FreePBX published security advisories to address vulnerabilities in the following products:

• FreePBX Security-Reporting ucp (FreePBX 16) - versions prior to 0.39
• FreePBX Security-Reporting ucp (FreePBX 17) - versions prior to 0.7
• FreePBX Security-Reporting superfecta (FreePBX 16) - versions prior to 16.0.40
• FreePBX Security-Reporting superfecta (FreePBX 17) - versions prior to 17.0.7

Review the following advisories and apply the necessary updates: 

• Authenticated Command Injection in FreePBX UCP Interface
• Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
• FreePBX Security Advisories

On 11^th June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 149.0.7827.114/115 (Windows/Mac), and 149.0.7827.114 (Linux).

 Review the Google security bulletins and apply the required updates.

On 10^th June 2026, Oracle published a security advisory to address vulnerabilities in PeopleSoft Enterprise PeopleTools - versions 8.61 and 8.62
Open-source reporting indicates that CVE-2026-35273 is being exploited in the wild.

Review the following Oracle Security Advisory and apply the necessary updates:

• Oracle Security Alert Advisory - CVE-2026-35273
• Oracle Critical Patch Updates, Security Alerts and Bulletins

On 10^th June 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) - versions prior to 19.0.2, 18.11.5 and 18.10.8
• GitLab Enterprise Edition (EE) - versions prior to 19.0.2, 18.11.5 and 18.10.8

• GitLab Patch Release: 19.0.2, 18.11.5, 18.10.8
• GitLab Releases

Between 10^th June 2026, Check Point published security advisories to address vulnerabilities in Identity Agent - versions prior to 81.087.0000

Review the following advisories and apply the necessary updates:

• Check Point Response to CVE-2026-10847- Identity Agent Local Privilege Escalation Vulnerability
• Check Point Security

On 9^th June 2026, Ivanti published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Ivanti Sentry - versions 10.5.1, 10.6.1, 10.7.0 and prior
• Ivanti Endpoint Manager Mobile - versions 12.9.0, 12.8.0.2, 12.7.0.1 and prior

• Security Advisory Ivanti Sentry (CVE-2026-10520, CVE-2026-10523)
• Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-6973 and CVE-2026-10727)
• Ivanti Security Advisories
• CISA KEV: CVE-2026-10520

On 9^th June 2026, OpenSSL published security advisories to address vulnerabilities in the following products:

• OpenSSL - versions 4.0.0 to versions prior to 4.0.1
• OpenSSL - versions 3.6.0 to versions prior to 3.6.3
• OpenSSL - versions 3.5.0 to versions prior to 3.5.7
• OpenSSL - versions 3.4.0 to versions prior to 3.4.6
• OpenSSL - versions 3.0.0 to versions prior to 3.0.21
• OpenSSL - versions 1.1.1 to versions prior to 1.1.1zh
• OpenSSL - versions 1.0.2 to versions prior to 1.0.2zq

Review the OpenSSL Security News and apply the necessary updates.

On 9^th June 2026, HPE published security advisories to address vulnerabilities in HPE ProLiant RL300 Gen11 - versions prior to 1.84_04-02-2026.

Review the provided web link and apply the necessary updates, once available:

• HPESBHF05057 rev.1 - HPE RL300 Server Using Arm Processors, Local Disclosure of Privileged Information
• HPE Security Bulletin Library

Between 9 and 10^th June 2026, Spring published security advisories to address vulnerabilities in the following products:

• Spring AMQP - multiple versions
• Spring Authorization Server - multiple versions
• Spring Web Services - multiple versions
• Spring Web Flow - multiple versions
• Spring REST Docs - multiple versions
• Spring Data Commons - multiple versions
• Spring Data Relational - multiple versions
• Spring Security - multiple versions
• Spring Data MongoDB - multiple versions
• Spring Data JDBC - multiple versions
• Spring Data KeyValue - multiple versions
• Spring Data R2DBC - multiple versions
• Spring Data Redis - multiple versions
• Spring Data REST - multiple versions
• Spring for Apache Kafka - multiple versions
• Spring for Apache Pulsar - multiple versions
• Spring Data Commons (transitively affects all Spring Data store modules) - multiple versions

Review the Spring Security Advisories and apply the necessary updates.

On 9^th June 2026, Mozilla published security advisories to address vulnerabilities in the following products:

• Focus for iOS - versions prior to 151.3.1
• Klar for iOS - versions prior to 151.3.1

Review the following advisories and apply the necessary updates:

• Mozilla Foundation Security Advisory 2026-55
• Mozilla Security Advisories

On 9^th June 2026, FreeBSD published security advisories addressing vulnerabilities in all supported versions.

Review the FreeBSD Security Advisories and apply the necessary updates.

On 9^th June 2026, AMD published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:

• Versal Prime Series Gen 2
• Versal AI Edge Series Gen 2
• AMD Management Console (AMC) - versions prior to 14.0.0
• AMD Ryzen Master - versions prior to 2.14.3
• AMD µProf - versions prior to 5.3

Review the following advisories and apply the necessary updates:

• ARM CPU Vulnerability: Bypass of Stage 1 translation, Stage-2 translation, or GPT Protection
• AMD Auto Updater Vulnerability
• AMD Product Security

On 3^rd June 2026, Drupal published security advisories to address vulnerabilities in the following products:

• LocalGov Workflows versions prior to 1.6.0
• Tacjs versions prior to 6.8
• Commerce Core 3.3.0 versions prior to 3.3.6
• Anti-Spam by CleanTalk versions prior to 9.7.1

Review the following Drupal Security Advisory and apply the necessary updates.

• LocalGov Workflows versions prior to 1.6.0
• Tacjs versions prior to 6.8
• Commerce Core 3.3.0 versions prior to 3.3.6
• Anti-Spam by CleanTalk versions prior to 9.7.1
• Drupal Security Advisories

On 10^th June 2026, Jenkins published a security advisory to address vulnerabilities in the following products:

• Jenkins weekly - version 2.567 and prior
• Jenkins LTS - version 2.555.2 and prior

Review the following advisories and apply the necessary updates:

• Jenkins Security Advisory 2026-06-10
• Jenkins Security Advisories

On 10^th June 2026, FreePBX published security advisories to address vulnerabilities in the following products:

• FreePBX Security-Reporting music (FreePBX 16) - versions 16.0.4 and prior
• FreePBX Security-Reporting music (FreePBX 17) - versions 17.0.6 and prior

Review the following advisories and apply the necessary updates: 

• Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module
• FreePBX Security Advisories

On 10^th June 2026, Veeam published security advisories to address vulnerabilities in the following products:

• OTP - versions prior to 27.3.4.13, 28.5.0.2 and 29.0.2
• erts (OTP) - versions prior to 15.2.7.9, 16.4.0.2 and 17.0.2
• inets (otp) - versions prior to 9.7.1, 9.6.2.2 and 9.3.2.6
• ssl (OTP) - versions prior to 11.7.2, 11.6.0.2 and 11.2.12.9

Review the following advisories and apply the necessary updates:

• Unbounded Stack Buffer Overflow in SCTP Error Cause Parsing in inet_drv
• Distribution-over-TLS LAN Allowlist is Silently Bypassed
• httpc leaks Authorization header to cross-origin redirect targets
• Erlang Security

On 10^th June 2026, HPE published security advisories to address vulnerabilities in HPE Telco Suite - multiple versions and models.

Review the provided web link and apply the necessary updates, once available:

• HPESBNW05061 rev.1 - HPE Telco Suite, Multiple Vulnerabilities
• HPE Security Bulletin Library

On 10^th June 2026, Palo Alto Networks published security advisories to address vulnerabilities in the following products:

• Cortex XSIAM CommvaultSecurityIQ Marketplace 1.1.0 - versions prior to 1.2.0
• Cortex XSOAR CommvaultSecurityIQ Marketplace 1.1.0 - versions prior to 1.2.0
• Prisma Browser - versions prior to 148.18.4.217

Review the following advisories and apply the necessary updates:

• CVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration
• PAN-SA-2026-0008 Chromium: Monthly Vulnerability Update (June 2026)
• Palo Alto Network Security Advisories

On 10^th June 2026, n8n published security updates to address vulnerabilities in the following products:

• n8n (Credential Exfiltration) - multiple versions
• n8n (Cross-Tenant Credential) - multiple versions
• n8n (n8n MCP Browser) - versions 2.26.2 to 2.25.7
• n8n(SecurityScorecard Node) - multiple versions

Review the following n8n Security Advisory and apply the necessary updates.

• Credential Exfiltration via Permission Bypass
• Cross-Tenant Credential Takeover via Dynamic Credentials EE Endpoints
• n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions
• SecurityScorecard Node Leaks API Token to User-Controlled Host
• n8n Security

On 9^th June 2026, VMware published security advisories to address vulnerabilities in VMware Tanzu for Valkey on Kubernetes – versions prior to 3.4.1.

Review the following advisories and apply the necessary updates:

• Product Release Advisory - VMware Tanzu for Valkey on Kubernetes 3.4.1
• Security Advisories - Tanzu

On 10^th June 2026, Splunk published a security update to address vulnerabilities in the following products.

• Splunk SOAR - versions prior to 8.5.0
• Splunk Enterprise - multiple versions and platforms
• Splunk Cloud Platform - multiple versions and platforms

Review the Splunk Security Advisories and apply the necessary updates.

On 9^th June 2026, SAP published security advisories to address vulnerabilities in multiple products. Included were updates for the following:

• SAP NetWeaver AS ABAP and ABAP Platform - versions SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816, SAP_BASIS 918, SAP_BASIS 919
• SAP NetWeaver AS ABAP and ABAP Platform - versions KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 722EXT, 7.53, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 9.16, 9.18, 91.9
• SAP Commerce Cloud and SAP Data Hub - versions HY_COM 2205, HY_DHUB 2205, COM_CLOUD 2211, 2211-JDK21, DHUB_CLOUD 2211
• SAP NetWeaver Application Server Java (Web Container) - version ENGINEAPI 7.50
• SAP Commerce Cloud - versions HY_COM 2205, COM_CLOUD 2211, 2211-JDK21
• SAP NetWeaver AS ABAP and ABAP Platform - versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SAP_BASIS 751, SAP_BASIS 752, SAP_BASIS 753, SAP_BASIS 754, SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, SAP_BASIS 816
• ODP Data Replication APIs - versions DW4CORE 200, 300, 400, PI_BASIS 2006_1_700, 701, 702, 731, 740, SAP_BW 750, 816
• SAP S/4HANA - versions S4FND 102, 103, 104, 105, 106, 107, 108, 109
• SAP NetWeaver AS Java (JDBC Test Servlet) - version BI_UDI 7.50
• SAP Wily Introscope Enterprise Manager - version WILY_INTRO_ENTERPRISE 10.8
• SAP MDG (Review Match Groups Application) - versions S4CORE 108, SAP_BASIS 916, SAP_BASIS 917, SAP_ABA 816
• SAP Business Objects Business Intelligence Platform - versions ENTERPRISE 430, 2025, 2027
• SAP Fiori (launchpad) - versions SAP_UI 754, 755, 756, 757, 758, 816
• SAP Business Objects - versions ENTERPRISE 430, 2025, 2027
• SAP NetWeaver AS Java - versions SERVERCORE 7.50, CORE-TOOLS 7.50, J2EE-APPS 7.50

Review the SAP Security Patch Day - July 2026 and apply the necessary updates.

On 8^th June 2026, Apache published a security advisory to address vulnerabilities in the Apache HTTP Server - versions prior to 2.4.68.

Review the provided web link and apply the necessary updates.

• Apache HTTP Server 2.4 vulnerabilities
• Apache HTTP Server Project

On 9^th June 2026, Veeam published security advisories to address vulnerabilities in the Veeam Backup and Replication - versions prior to 12.3.2.4854.

Review the following advisories and apply the necessary updates:

• Vulnerability Resolved in Veeam Backup and Replication 12.3.2.4854
• Veeam Knowledge Base

On 9^th June 2026, MISP published a security advisory to address vulnerabilities in the MISP (Malware Information Sharing Platform) - versions prior to v2.5.39.

Review the provided web link and apply the necessary updates.

• MISP
• MISP 2.5.39: New Dashboard Experience, Stronger STIX, Sharper Analyst Workflows

On 9^th June 2026, Ivanti published security advisories to address vulnerabilities in the following products:

• Ivanti Sentry - versions 10.5.1, 10.6.1, 10.7.0 and prior
• Ivanti Endpoint Manager Mobile - versions 12.9.0, 12.8.0.2, 12.7.0.1 and prior

Review the following advisories and apply the necessary updates:

• Security Advisory Ivanti Sentry (CVE-2026-10520, CVE-2026-10523)
• Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-6973 and CVE-2026-10727)
• Ivanti Security Advisories

On 9^th June 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• FortiSandbox 5.0 - versions 5.0.0 to 5.0.5
• FortiSandbox 4.4 - versions 4.4.0 to 4.4.8
• FortiSandbox Cloud 5.0 - versions 5.0.4 to 5.0.5
• FortiSandbox PaaS 5.0 - versions 5.0.4 through 5.0.5

Review the following advisories and apply the necessary updates:

• Second-Order OS Command Injection via JSON Input on start vnc feature
• Fortinet PSIRT Advisories

On 8^th June 2026, Google released security updates to address multiple vulnerabilities affecting Stable Channel Chrome for Desktop versions prior to 149.0.7827.102/.103 for Windows/Mac, and 49.0.7827.102 for Linux.

Google is aware that an exploit for CVE-2026-11645 exists in the wild.

Update 1                                                                     

On 9^th June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-11645 to their Known Exploited Vulnerabilities (KEV) Database.

Review the provided web links and apply the necessary updates when available.

• Google Chrome Security Advisory
• CISA KEV: CVE-2026-11645

On 9^th June 2026, Microsoft published security advisories to address vulnerabilities in multiple products. Included were updates for the following products:

• .NET 10.0
• .NET 8.0
• .NET 9.0
• ASP.NET
• Azure Connected Machine Agent
• Azure HorizonDB
• Azure Kubernetes Service
• Azure Local
• Azure Logic Apps
• Azure Machine Learning
• Azure Monitor Agent
• Azure Monitor Agent Metrics Extension
• Azure Orbital Spatio
• Azure Privileged Identity Management (PIM)
• Azure Resource Manager
• Azure SDK
• Azure Stack Edge
• Azure Stack HCI
• Azure Virtual Network Gateway
• Copilot Chat
• Linux kernel - Microsoft MANA Network Driver
• M365 Copilot for Desktop
• Microsoft .NET Framework
• Microsoft 365
• Microsoft 365 Copilot
• Microsoft Authenticator
• Microsoft Bing
• Microsoft Confluence SAML SSO plugin
• Microsoft Data Formulator
• Microsoft Defender for Endpoint for Mac
• Microsoft Dynamics 365
• Microsoft Edge
• Microsoft Entra ID
• Microsoft Excel
• Microsoft Excel 2016
• Microsoft Exchange Online
• Microsoft Exchange Server
• Microsoft Global Secure Access (GSA)
• Microsoft Graph
• Microsoft JIRA SAML SSO plugin
• Microsoft Live Share Canvas SDK
• Microsoft Malware Protection Engine
• Microsoft Office
• Microsoft Office 2016
• Microsoft Office 2019
• Microsoft Office 365
• Microsoft Office LTSC
• Microsoft Outlook for iOS
• Microsoft PC Manager
• Microsoft Planetary Computer Pro (GeoCatalog)
• Microsoft Power Pages
• Microsoft PowerPoint for Android
• Microsoft PowerToys
• Microsoft SQL Server 2016
• Microsoft SQL Server 2017
• Microsoft SQL Server 2019
• Microsoft SQL Server 2022
• Microsoft SQL Server 2025
• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Microsoft Teams
• Microsoft Visual Studio
• Microsoft Visual Studio 2026
• Microsoft Word
• Microsoft Word 2016
• Nuance PowerScribe 360
• Nuance PowerScribe One
• Office Online Server
• Power Automate for Desktop
• PowerScribe One
• Remote Desktop client
• Visual Studio
• Visual Studio Code
• Windows 10
• Windows 11
• Windows Admin Center
• Windows Admin Center in Azure Portal
• Windows App Client
• Windows Narrator Braille
• Windows Server 2012
• Windows Server 2016
• Windows Server 2019
• Windows Server 2022
• Windows Server 2025