<?xml version="1.0" encoding="UTF-8"?><feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en"><id>https://cyber.gc.ca/api/cccs/atom/v1/get?feed=alerts_advisories&amp;lang=en</id><link rel="self" href="https://cyber.gc.ca/api/cccs/atom/v1/get?feed=alerts_advisories&amp;lang=en"/><title>Alerts and advisories</title><updated>2026-09-04T14:18:58Z</updated><entry><id>https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-883</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-883"/><title><![CDATA[Google security advisory (AV26-883)]]></title><updated>2026-09-04T14:18:58Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8185" about="/en/alerts-advisories/google-security-advisory-av26-883" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-883<br /><strong>Date:</strong> September 4, 2026</p>

<p>As of September 3, 2026, Google is affected by vulnerabilities in the following product:</p>

<ul><li>Chrome
	<ul><li>Prior to 152.0.7977.82</li>
	</ul></li>
</ul><p>Google is aware that an exploit for CVE-2026-85046 exists in the wild.</p>

<p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html">Stable Channel Update for Desktop</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/suse-linux-security-advisory-av26-882</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/suse-linux-security-advisory-av26-882"/><title><![CDATA[SUSE Linux security advisory (AV26-882)]]></title><updated>2026-09-03T19:47:27Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8182" about="/en/alerts-advisories/suse-linux-security-advisory-av26-882" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-882<br /><strong>Date: </strong>September 3, 2026</p>

<p>As of September 3, 2026, SUSE is affected by vulnerabilities in the following product:</p>

<ul><li>Rancher
	<ul><li>Prior to 2.15.1</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://github.com/rancher/rancher/releases/tag/v2.15.1">Release v2.15.1 · rancher/rancher · GitHub </a></li>
	<li><a href="https://www.suse.com/support/update/">SUSE Update Advisories</a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/control-systems-siemens-security-advisory-av26-881</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/control-systems-siemens-security-advisory-av26-881"/><title><![CDATA[[Control Systems] Siemens security advisory (AV26-881)]]></title><updated>2026-09-03T19:32:38Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8181" about="/en/alerts-advisories/control-systems-siemens-security-advisory-av26-881" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-881<br /><strong>Date: </strong>September 3, 2026</p>

<p>As of September 3, 2026, Siemens is affected by a vulnerability in the following products:</p>

<ul><li>Mendix SAML (Mendix 10 compatible)
	<ul><li>Prior to V4.2.3</li>
	</ul></li>
	<li>Mendix SAML (Mendix 11 compatible)
	<ul><li>Prior to V4.2.3</li>
	</ul></li>
	<li>Mendix SAML (Mendix 9.24 compatible)
	<ul><li>Prior to V3.6.27</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://cert-portal.siemens.com/productcert/html/ssa-887643.html">SSA-887643: Account Hijacking Vulnerability in Mendix SAML module</a></li>
	<li><a href="https://www.siemens.com/en-us/content/cert-services/">CERT Services | Siemens</a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/n8n-security-advisory-av26-880</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/n8n-security-advisory-av26-880"/><title><![CDATA[n8n security advisory (AV26-880)]]></title><updated>2026-09-03T18:59:03Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8180" about="/en/alerts-advisories/n8n-security-advisory-av26-880" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-880<br /><strong>Date: </strong>September 3, 2026</p>

<p>As of September 3, 2026, n8n is affected by vulnerabilities in the following product:</p>

<ul><li>n8n
	<ul><li>Prior to 1.123.76</li>
		<li>Prior to 2.35.4</li>
		<li>Prior to 2.36.2</li>
		<li>Prior to 2.37.7</li>
		<li>Prior to 2.38.2</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://github.com/n8n-io/n8n/security">Overview · n8n-io/n8n · GitHub </a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/amd-security-advisory-av26-879</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/amd-security-advisory-av26-879"/><title><![CDATA[AMD security advisory (AV26-879)]]></title><updated>2026-09-03T15:05:51Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8179" about="/en/alerts-advisories/amd-security-advisory-av26-879" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-879<br /><strong>Date: </strong>September 3, 2026</p>

<p>As of September 2, 2026, AMD is affected by vulnerabilities in the following products:</p>

<ul><li>2nd Gen AMD EPYC™ Processors
	<ul><li>all except RomePI 1.0.0.H</li>
	</ul></li>
	<li>3rd Gen AMD EPYC™ Processors
	<ul><li>all except MilanPI 1.0.0.C</li>
	</ul></li>
	<li>4th Gen AMD EPYC™ Processors
	<ul><li>all except GenoaPI 1.0.0.8</li>
	</ul></li>
	<li>AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
	<ul><li>all except ComboAM4 1.0.0.B</li>
		<li>all except ComboAM4v2 1.2.0.B</li>
	</ul></li>
	<li>AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
	<ul><li>all except PicassoPI-FP5 1.0.1.0</li>
		<li>all except PollockPI-FT5 1.0.0.6</li>
	</ul></li>
	<li>AMD EPYC™ Embedded 3000
	<ul><li>all except Snowyowl PI 1.1.0.B</li>
	</ul></li>
	<li>AMD EPYC™ Embedded 7002
	<ul><li>all except EmbRomePI-SP3 1.0.0.B</li>
	</ul></li>
	<li>AMD EPYC™ Embedded 7003
	<ul><li>all except EmbMilanPI-SP3 1.0.0.8</li>
	</ul></li>
	<li>AMD EPYC™ Embedded 9003
	<ul><li>all except EmbGenoaPI-SP5 1.0.0.3</li>
	</ul></li>
	<li>AMD Instinct™ MI300A
	<ul><li>all except MI300 SR5 PI 1.0.0.1</li>
	</ul></li>
	<li>AMD Radeon™ PRO V620 Graphics Products
	<ul><li>all except Contact your AMD Customer Engineering representative</li>
	</ul></li>
	<li>AMD Ryzen™ 3000 Series Desktop Processors
	<ul><li>all except ComboAM4 1.0.0.B</li>
		<li>all except ComboAM4v2 1.2.0.B</li>
	</ul></li>
	<li>AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
	<ul><li>all except PicassoPI-FP5 1.0.1.0</li>
	</ul></li>
	<li>AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics
	<ul><li>all except CezannePI-FP6 1.0.0.F</li>
	</ul></li>
	<li>AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
	<ul><li>all except ComboAM4v2 1.2.0.B</li>
	</ul></li>
	<li>AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
	<ul><li>all except RenoirPI-FP6 1.0.0.D</li>
	</ul></li>
	<li>AMD Ryzen™ 5000 Series Desktop Processors
	<ul><li>all except ComboAM4v2 1.2.0.B</li>
		<li>all except ComboAM4v2v 1.2.0.B</li>
	</ul></li>
	<li>AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
	<ul><li>all except ComboAM4v2 1.2.0.B</li>
	</ul></li>
	<li>AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
	<ul><li>all except CezannePI-FP6 1.0.0.F</li>
	</ul></li>
	<li>AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
	<ul><li>all except CezannePI-FP6 1.0.0.F</li>
	</ul></li>
	<li>AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
	<ul><li>all except RembrandtPI-FP7 1.0.0.9b</li>
	</ul></li>
	<li>AMD Ryzen™ 7000 Series Processors
	<ul><li>all except ComboAM5 1.0.0.7b</li>
	</ul></li>
	<li>AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
	<ul><li>all except MendocinoPI-FT6 1.0.0.6</li>
	</ul></li>
	<li>AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
	<ul><li>all except RembrandtPI-FP7 1.0.0.9b</li>
	</ul></li>
	<li>AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics
	<ul><li>all except PhoenixPI-FP8-FP7 1.0.0.2</li>
	</ul></li>
	<li>AMD Ryzen™ 7045 Series Mobile Processors
	<ul><li>all except DragonRangeFL1PI 1.0.0.3a</li>
	</ul></li>
	<li>AMD Ryzen™ Embedded 5000
	<ul><li>all except EmbAM4PI 1.0.0.4</li>
	</ul></li>
	<li>AMD Ryzen™ Embedded R1000
	<ul><li>all except EmbeddedPI-FP5 1.2.0.A</li>
	</ul></li>
	<li>AMD Ryzen™ Embedded R2000
	<ul><li>all except EmbeddedPI-FP5 1.0.0.2</li>
	</ul></li>
	<li>AMD Ryzen™ Embedded V1000
	<ul><li>all except EmbeddedPI-FP5 1.2.0.A</li>
	</ul></li>
	<li>AMD Ryzen™ Embedded V2000
	<ul><li>all except EmbeddedPI-FP6 1.0.0.9</li>
	</ul></li>
	<li>AMD Ryzen™ Embedded V3000
	<ul><li>all except EmbeddedPI-FP7r2 1.0.0.8</li>
	</ul></li>
	<li>AMD Ryzen™ Threadripper™ 3000 Series Processors
	<ul><li>all except CastlePeakPI-SP3r3 1.0.0.A</li>
	</ul></li>
	<li>AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
	<ul><li>all except CastlePeakWSPI-sWRX8 1.0.0.C</li>
		<li>all except ChagallWSPI-sWRX8 1.0.0.7</li>
	</ul></li>
	<li>AMD Ryzen™ Threadripper™ PRO 5000WX Processors
	<ul><li>all except ChagallWSPI-sWRX8 1.0.0.7</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7009.html">AMD <span lang="en" xml:lang="en" xml:lang="en">Processor Vulnerabilities</span></a></li>
	<li><a href="https://www.amd.com/en/resources/product-security.html">AMD <span lang="en" xml:lang="en" xml:lang="en">Product Security</span></a></li>
</ul><!--CUT & PASTE the French version info --><p><strong>Numéro de série : </strong>AV26-879<br /><strong>Date : </strong>3 septembre 2026</p>

<p>En date du 2 septembre 2026, AMD est touché par des vulnérabilités dans les produits suivants :</p>

<ul><li><span lang="en" xml:lang="en" xml:lang="en">2nd Gen</span> AMD EPYC™ <span lang="en" xml:lang="en" xml:lang="en">Processors</span>

	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Rome</span>PI 1.0.0.H</li>
	</ul></li>
	<li>3<span lang="en" xml:lang="en" xml:lang="en">rd Gen</span> AMD EPYC™ <span lang="en" xml:lang="en" xml:lang="en">Processors</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Milan</span>PI 1.0.0.C</li>
	</ul></li>
	<li><span lang="en" xml:lang="en" xml:lang="en">4th Gen</span> AMD EPYC™ <span lang="en" xml:lang="en" xml:lang="en">Processors</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Genoa</span>PI 1.0.0.8</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Athlon</span>™ 3000 <span lang="en" xml:lang="en" xml:lang="en">Series Desktop Processors with Radeon™ Graphics</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Combo</span>AM4 1.0.0.B</li>
		<li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Combo</span>AM4v2 1.2.0.B</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Athlon</span>™ 3000 <span lang="en" xml:lang="en" xml:lang="en">Series Mobile Processors with Radeon™ Graphics</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Picasso</span>PI-FP5 1.0.1.0</li>
		<li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Pollock</span>PI-FT5 1.0.0.6</li>
	</ul></li>
	<li>AMD EPYC™ <span lang="en" xml:lang="en" xml:lang="en">Embedded</span> 3000
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Snowyowl</span> PI 1.1.0.B</li>
	</ul></li>
	<li>AMD EPYC™ <span lang="en" xml:lang="en" xml:lang="en">Embedded</span> 7002
	<ul><li>TOUS sauf E<span lang="en" xml:lang="en" xml:lang="en">mbRome</span>PI-SP3 1.0.0.B</li>
	</ul></li>
	<li>AMD EPYC™<span lang="en" xml:lang="en" xml:lang="en"> Embedded</span> 7003
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">EmbMilan</span>PI-SP3 1.0.0.8</li>
	</ul></li>
	<li>AMD EPYC™ <span lang="en" xml:lang="en" xml:lang="en">Embedded</span> 9003
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">EmbGenoa</span>PI-SP5 1.0.0.3</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Instinct</span>™ MI300A
	<ul><li>TOUS sauf MI300 SR5 PI 1.0.0.1</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Radeon</span>™ PRO V620 <span lang="en" xml:lang="en" xml:lang="en">Graphics Products</span>
	<ul><li>TOUS <span lang="en" xml:lang="en" xml:lang="en">sauf Contact your</span> AMD <span lang="en" xml:lang="en" xml:lang="en">\Customer Engineering representative</span></li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen</span>™ 3000 <span lang="en" xml:lang="en" xml:lang="en">Series Desktop Processors</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Combo</span>AM4 1.0.0.B</li>
		<li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Combo</span>AM4v2 1.2.0.B</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen</span>™ 3000 <span lang="en" xml:lang="en" xml:lang="en">Series Mobile Processor with Radeon™ Graphics</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Picasso</span>PI-FP5 1.0.1.0</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen</span>™ 3000 <span lang="en" xml:lang="en" xml:lang="en">Series Processors with Radeon™ Graphics</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Cezanne</span>PI-FP6 1.0.0.F</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen</span>™ 4000 <span lang="en" xml:lang="en" xml:lang="en">Series Desktop Processors with Radeon</span>™ <span lang="en" xml:lang="en" xml:lang="en">Graphics</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Combo</span>AM4v2 1.2.0.B</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™</span> 4000 <span lang="en" xml:lang="en" xml:lang="en">Series Mobile Processors with Radeon™ Graphics</span>
	<ul><li>TOUS <span lang="en" xml:lang="en" xml:lang="en">sauf Renoir</span>PI-FP6 1.0.0.D</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™</span> 5000 <span lang="en" xml:lang="en" xml:lang="en">Series Desktop Processors</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Combo</span>AM4v2 1.2.0.B</li>
		<li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Combo</span>AM4v2v 1.2.0.B</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™</span> 5000 <span lang="en" xml:lang="en" xml:lang="en">Series Desktop Processors with Radeon™ Graphics</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Combo</span>AM4v2 1.2.0.B</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™</span> 5000 <span lang="en" xml:lang="en" xml:lang="en">Series Mobile Processors with Radeon™ Graphics</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Cezanne</span>PI-FP6 1.0.0.F</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™</span> 5000 <span lang="en" xml:lang="en" xml:lang="en">Series Processors with Radeon™ Graphics</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Cezanne</span>PI-FP6 1.0.0.F</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™</span> 6000 <span lang="en" xml:lang="en" xml:lang="en">Series Processors with Radeon™ Graphics</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Rembrandt</span>PI-FP7 1.0.0.9b</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™</span> 7000 <span lang="en" xml:lang="en" xml:lang="en">Series Processors</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Combo</span>AM5 1.0.0.7b</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™</span> 7020 <span lang="en" xml:lang="en" xml:lang="en">Series Processors with Radeon™ Graphics</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Mendocino</span>PI-FT6 1.0.0.6</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™</span> 7035 <span lang="en" xml:lang="en" xml:lang="en">Series Processors with Radeon™ Graphics</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Rembrandt</span>PI-FP7 1.0.0.9b</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™</span> 7040 <span lang="en" xml:lang="en" xml:lang="en">Series Processors with Radeon™ Graphics</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Phoenix</span>PI-FP8-FP7 1.0.0.2</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™</span> 7045 <span lang="en" xml:lang="en" xml:lang="en">Series Mobile Processors</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">DragonRange</span>FL1PI 1.0.0.3a</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™ Embedded</span> 5000
	<ul><li>TOUS sauf EmbAM4PI 1.0.0.4</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™ Embedded</span> R1000
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Embedded</span>PI-FP5 1.2.0.A</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™ Embedded</span> R2000
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Embedded</span>PI-FP5 1.0.0.2</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™ Embedded</span> V1000
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Embedded</span>PI-FP5 1.2.0.A</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™ Embedded</span> V2000
	<ul><li>TOUS sauf EmbeddedPI-FP6 1.0.0.9</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™ Embedded</span> V3000
	<ul><li>TOUS sauf EmbeddedPI-FP7r2 1.0.0.8</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™ Threadripper™</span> 3000 <span lang="en" xml:lang="en" xml:lang="en">Series Processors</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">CastlePeak</span>PI-SP3r3 1.0.0.A</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™ Threadripper™</span> PRO 3000WX <span lang="en" xml:lang="en" xml:lang="en">Series Processors</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">CastlePeak</span>WSPI-sWRX8 1.0.0.C</li>
		<li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Chagall</span>WSPI-sWRX8 1.0.0.7</li>
	</ul></li>
	<li>AMD <span lang="en" xml:lang="en" xml:lang="en">Ryzen™ Threadripper™</span> PRO 5000WX <span lang="en" xml:lang="en" xml:lang="en">Processors</span>
	<ul><li>TOUS sauf <span lang="en" xml:lang="en" xml:lang="en">Chagall</span>WSPI-sWRX8 1.0.0.7</li>
	</ul></li>
</ul><p>Le Centre pour la cybersécurité encourage les utilisateurs et les administrateurs à consulter les liens fournis et à installer les mises à jour nécessaires, dès qu'elles sont disponibles.</p>

<ul class="list-unstyled"><li><a href="https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7009.html">AMD <span lang="en" xml:lang="en" xml:lang="en">Processor Vulnerabilities</span> (en anglais seulement)</a></li>
	<li><a href="https://www.amd.com/en/resources/product-security.html">AMD <span lang="en" xml:lang="en" xml:lang="en">Product Security</span> (en anglais seulement)</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/f5-security-advisory-av26-878</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/f5-security-advisory-av26-878"/><title><![CDATA[F5 security advisory (AV26-878)]]></title><updated>2026-09-03T14:05:53Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8178" about="/en/alerts-advisories/f5-security-advisory-av26-878" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-878<br /><strong>Date: </strong>September 3, 2026</p>

<p>As of September 2, 2026, F5 is affected by vulnerabilities in the following products:</p>

<ul><li>BIG-IP (all modules)
	<ul><li>Prior to 17.1.3.4</li>
		<li>Prior to 17.5.1.8</li>
		<li>Prior to 21.0.0.3</li>
		<li>Prior to 21.1.0.1</li>
	</ul></li>
</ul><ul><li>BIG-IQ
	<ul><li>Prior to 8.4.2.1</li>
	</ul></li>
</ul><ul><li>NGINX Gateway Fabric
	<ul><li>Prior to 2.6.8</li>
	</ul></li>
</ul><ul><li>NGINX Ingress Controller
	<ul><li>Prior to 2026-lts-r5</li>
		<li>Prior to 5.6.0</li>
	</ul></li>
</ul><ul><li>NGINX JavaScript
	<ul><li>9.9</li>
		<li>Prior to 1.0.1</li>
	</ul></li>
	<li>APM Clients
	<ul><li>Prior to 7.2.6</li>
	</ul></li>
</ul><ul><li>BIG-IP APM
	<ul><li>Multiple versions</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://my.f5.com/manage/s/article/K000162872">K000162872: Out-of-band Security Notification (September 2, 2026)</a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/jenkins-security-advisory-av26-877</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/jenkins-security-advisory-av26-877"/><title><![CDATA[Jenkins security advisory (AV26-877)]]></title><updated>2026-09-03T13:54:40Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8177" about="/en/alerts-advisories/jenkins-security-advisory-av26-877" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-877<br /><strong>Date: </strong>September 3, 2026</p>

<p>As of September 2, 2026, Jenkins Project is affected by vulnerabilities in the following products:</p>

<ul><li>Jenkins
	<ul><li>ALL except 2.568.3</li>
		<li>ALL except 2.580</li>
	</ul></li>
</ul><ul><li>Jenkins Allure Plugin
	<ul><li>Prior to or equal to 2.35.2</li>
	</ul></li>
</ul><ul><li>Jenkins Customizable Header Plugin
	<ul><li>Prior to or equal to 295.v2544b_ca_19b_97</li>
	</ul></li>
</ul><ul><li>Jenkins File Parameter Plugin
	<ul><li>Prior to or equal to 425.v3fa_801681b_5e</li>
	</ul></li>
</ul><ul><li>Jenkins GitLab Plugin
	<ul><li>Prior to or equal to 1.9.16</li>
	</ul></li>
</ul><ul><li>Jenkins LDAP Plugin
	<ul><li>Prior to or equal to 807.809.vd3a_4e5e4ec98</li>
	</ul></li>
</ul><ul><li>Jenkins Microsoft Entra ID (previously Azure AD) Plugin
	<ul><li>Prior to or equal to 710.v0b_ff8e9cc2d2</li>
	</ul></li>
</ul><ul><li>Jenkins Parameterized Remote Trigger Plugin
	<ul><li>Prior to or equal to 3.2.2</li>
	</ul></li>
</ul><ul><li>Jenkins Performance Plugin
	<ul><li>Prior to or equal to 1015.v09ca_52b_3370e</li>
	</ul></li>
</ul><ul><li>Jenkins Pipeline: Build Step Plugin
	<ul><li>Prior to or equal to 599.v4b_67ea_11b_152</li>
	</ul></li>
</ul><ul><li>Jenkins SAML Plugin
	<ul><li>Prior to or equal to 4.618.v441a_27fa_46d2</li>
	</ul></li>
</ul><ul><li>Jenkins Script Security Plugin
	<ul><li>Prior to or equal to 1412.v7737b_3405f86</li>
	</ul></li>
</ul><ul><li>Jenkins TICS Plugin
	<ul><li>Prior to or equal to 2025.1.1</li>
	</ul></li>
</ul><ul><li>Jenkins ThinBackup Plugin
	<ul><li>Prior to or equal to 2.1.4</li>
	</ul></li>
</ul><ul><li>Jenkins XebiaLabs XL Deploy Plugin
	<ul><li>Prior to or equal to 26.1.0</li>
	</ul></li>
</ul><ul><li>Jenkins update-center2
	<ul><li>Prior to or equal to 3.18.3</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.jenkins.io/security/advisory/2026-09-02/">Jenkins Security Advisory 2026-09-02</a></li>
	<li><a href="https://www.jenkins.io/security/advisories/">Security Advisories</a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-876</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-876"/><title><![CDATA[Cisco security advisory (AV26-876)]]></title><updated>2026-09-03T13:13:34Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8176" about="/en/alerts-advisories/cisco-security-advisory-av26-876" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-876<br /><strong>Date: </strong>September 3, 2026</p>

<p>As of September 2, 2026, Cisco is affected by vulnerabilities in the following products:</p>

<ul><li>Cisco IOS XR Software
	<ul><li>Multiple versions</li>
	</ul></li>
</ul><ul><li>Cisco Nexus 9000 Series Switches
	<ul><li>Multiple products</li>
	</ul></li>
</ul><ul><li>Cisco Desk Phone 9800 Series and Video Phone 8875
	<ul><li>Prior to 5.0(1)</li>
	</ul></li>
	<li>IP Phone 7800 and 8800
	<ul><li>Prior to 14.4(1)SR3</li>
	</ul></li>
</ul><ul><li>IP Phone 8845 and 8865
	<ul><li>Prior to14.4(1)SR4</li>
	</ul></li>
</ul><ul><li>Wireless IP Phone 8821
	<ul><li>Prior to 11.0(6)SR8</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9k-s1-rce-EH8dEtr">Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability</a></li>
	<li><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM">Cisco IOS XR Software Security Hardening Release: September 2026</a></li>
	<li><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-dos-txMYNRzv">Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability</a></li>
	<li><a href="https://sec.cloudapps.cisco.com/security/center/publicationListing.x">Cisco Security Advisories </a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/jfrog-security-advisory-av26-867</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/jfrog-security-advisory-av26-867"/><title><![CDATA[JFrog security advisory (AV26-867) – Update 1]]></title><updated>2026-09-02T18:55:31Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8166" about="/en/alerts-advisories/jfrog-security-advisory-av26-867" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-867<br /><strong>Date: </strong>September 1, 2026<br /><strong>Updated: </strong>September 2, 2026</p>

<p>As of August 28, 2026, JFrog is affected by a vulnerability in the following product:</p>

<ul><li>Artifactory
	<ul><li>Prior to 7.111.21</li>
		<li>Prior to 7.117.28</li>
		<li>Prior to 7.125.20</li>
		<li>Prior to 7.133.29</li>
		<li>Prior to 7.146.38</li>
		<li>Prior to 7.161.20</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">Open-source reporting indicates that CVE-2026-82329 related to JFrog Artifactory is being exploited in the wild.</p>

<p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<h2 class="h3">Update 1</h2>

<p>On September 2, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-82329 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<ul class="list-unstyled"><li><a href="https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases">Artifactory Self-Managed Releases</a></li>
	<li><a href="https://docs.jfrog.com/releases/docs/jfrog-security-advisories">JFrog Security Advisories</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-82329">CISA KEV: CVE-2026-82329</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/sonicwall-security-advisory-av26-872</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/sonicwall-security-advisory-av26-872"/><title><![CDATA[SonicWall security advisory (AV26-872) – Update 1]]></title><updated>2026-09-02T18:44:56Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8171" about="/en/alerts-advisories/sonicwall-security-advisory-av26-872" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-872<br /><strong>Date: </strong>September 2, 2026</p>

<p>As of September 1, 2026, SonicWall is affected by a vulnerability in the following product:</p>

<ul><li>SMA1000 - 6210, 7210, 8200v
	<ul><li>12.4.3-03453 (platform-hotfix) and older versions</li>
		<li>12.5.0-02835 (platform-hotfix) and older versions</li>
	</ul></li>
</ul><p>SonicWall indicates that CVE-2026-83548 and CVE-2026-83549 are being exploited.</p>

<h2 class="h3">Update 1</h2>

<p>On September 2, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-83548 and CVE-2026-83549 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016">Security Advisory</a></li>
	<li><a href="https://psirt.global.sonicwall.com/">SonicWall Security Advisories</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-83548">CISA KEV: CVE-2026-83548</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-83549">CISA KEV: CVE-2026-83549</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-875</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-875"/><title><![CDATA[Progress Software security advisory (AV26-875)]]></title><updated>2026-09-02T15:33:28Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8175" about="/en/alerts-advisories/progress-software-security-advisory-av26-875" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-875<br /><strong>Date: </strong>September 2, 2026</p>

<p>As of September 2, 2026, Progress Software is affected by vulnerabilities in the following product:</p>

<ul><li>Telerik UI for ASP.NET AJAX
	<ul><li>Prior to 2026.3.812</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-rie-path-traversal-cve-2026-18672">Telerik Web Forms RadImageEditor Path Traversal Vulnerability (CVE-2026-18672)</a></li>
	<li><a href="https://www.telerik.com/products/aspnet-ajax/documentation/knowledge-base/kb-security-dialoghandler-uploadpaths-tampering-cve-2026-19219">Telerik Web Forms DialogHandler UploadPaths Tampering Vulnerability (CVE-2026-19219)</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-874</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-874"/><title><![CDATA[Google security advisory (AV26-874)]]></title><updated>2026-09-02T14:27:54Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8173" about="/en/alerts-advisories/google-security-advisory-av26-874" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-874<br /><strong>Date: </strong>September 2, 2026</p>

<p>As of September 2, 2026, Google is affected by vulnerabilities in the following product:</p>

<ul><li>Chrome
	<ul><li>Prior to 152.0.7977.75</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop.html">Stable Channel Update for Desktop</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/hpe-security-advisory-av26-873</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/hpe-security-advisory-av26-873"/><title><![CDATA[HPE security advisory (AV26-873)]]></title><updated>2026-09-02T13:38:08Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8172" about="/en/alerts-advisories/hpe-security-advisory-av26-873" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-873<br /><strong>Date: </strong>September 2, 2026</p>

<p>As of September 1, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products:</p>

<ul><li>HPE Networking AOS-CX
	<ul><li>Prior to or equal to 10.10.1180</li>
		<li>Prior to or equal to 10.13.1180</li>
		<li>Prior to or equal to 10.16.1051</li>
		<li>Prior to or equal to 10.17.1021</li>
		<li>Prior to or equal to 10.18.0001</li>
	</ul></li>
</ul><ul><li>HPE Networking Fabric Composer
	<ul><li>Prior to or equal to 7.3.3</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&amp;docLocale=en_US#hpesbnw05133-rev-1-multiple-vulnerabilities-in-hpe-0">HPESBNW05133 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking Fabric Composer</a></li>
	<li><a href="https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05134en_us&amp;docLocale=en_US#hpesbnw05134-rev-1-multiple-vulnerabilities-in-hpe-0">HPESBNW05134 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking ArubaOS-CX (AOS-CX)</a></li>
	<li><a href="https://support.hpe.com/connect/s/securitybulletinlibrary?language=en_US">HPE Security Bulletin Library</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/control-systems-schneider-electric-security-advisory-av26-871</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/control-systems-schneider-electric-security-advisory-av26-871"/><title><![CDATA[[Control systems] Schneider Electric security advisory (AV26-871)]]></title><updated>2026-09-02T12:28:12Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8170" about="/en/alerts-advisories/control-systems-schneider-electric-security-advisory-av26-871" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-871<br /><strong>Date: </strong>September 2, 2026</p>

<p>As of September 1, 2026, Schneider Electric is affected by vulnerabilities in the following products:</p>

<ul><li>NetBotz 5 - 750/755
	<ul><li>Versions prior to or equal to 5.5.2</li>
	</ul></li>
	<li>PowerChute Serial Shutdown
	<ul><li>Versions prior to or equal to 1.5</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.</p>

<ul class="list-unstyled"><li><a href="https://download.se.com/files?p_Doc_Ref=SEVD-2026-223-02&amp;p_enDocType=Security+and+Safety+Notice&amp;p_File_Name=SEVD-2026-223-02.pdf">Multiple Vulnerabilities on NetBotz 5 - 750/755 Products</a></li>
	<li><a href="https://download.se.com/files?p_Doc_Ref=SEVD-2026-223-01&amp;p_enDocType=Security+and+Safety+Notice&amp;p_File_Name=SEVD-2026-223-01.pdf ">Improper Restriction of Excessive Authentication Attempts vulnerability on PowerChute™ Serial Shutdown</a></li>
	<li><a href="https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp">Schneider Electric Security Notifications</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/erlang-security-advisory-av26-870</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/erlang-security-advisory-av26-870"/><title><![CDATA[Erlang security advisory (AV26-870)]]></title><updated>2026-09-01T18:50:12Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8169" about="/en/alerts-advisories/erlang-security-advisory-av26-870" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-870<br /><strong>Date: </strong>September 1, 2026</p>

<p>As of September 1, 2026, Erlang is affected by vulnerabilities in the following product:</p>

<ul><li>OTP - Multiple versions</li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.</p>

<ul class="list-unstyled"><li><a href="https://github.com/erlang/otp/security/advisories/">Erlang Security Advisories</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/rockwell-automation-security-advisory-av26-869</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/rockwell-automation-security-advisory-av26-869"/><title><![CDATA[Rockwell Automation security advisory (AV26-869)]]></title><updated>2026-09-01T18:45:58Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8168" about="/en/alerts-advisories/rockwell-automation-security-advisory-av26-869" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-869<br /><strong>Date: </strong>September 1, 2026</p>

<p>As of September 1, 2026, Rockwell Automation is affected by vulnerabilities in the following products:</p>

<ul><li>1756-ENBT Module
	<ul><li>All versions</li>
	</ul></li>
	<li>ArmorStart LT
	<ul><li>Prior to or equal to v2.001</li>
	</ul></li>
	<li>CompactLogix 5380 / ControlLogix 5580
	<ul><li>Prior to or equal to V33</li>
		<li>V34.011 to V34.014</li>
		<li>V35.011 to V35.013</li>
		<li>V36.011 to V36.012</li>
	</ul></li>
	<li>RSLinx Classic
	<ul><li>Prior to or equal to V4.50</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1797.html">SD1797 | Security Advisory | Rockwell Automation | US</a></li>
	<li><a href="https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1798.html">SD1798 | Security Advisory | Rockwell Automation | US</a></li>
	<li><a href="https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1794.html">SD1794 | Security Advisory | Rockwell Automation | US</a></li>
	<li><a href="https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1792.html">SD1792 | Security Advisory | Rockwell Automation | US</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/mozilla-security-advisory-av26-868</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/mozilla-security-advisory-av26-868"/><title><![CDATA[Mozilla security advisory (AV26-868)]]></title><updated>2026-09-01T18:14:12Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8167" about="/en/alerts-advisories/mozilla-security-advisory-av26-868" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-868<br /><strong>Date: </strong>September 1, 2026</p>

<p>As of September 1, 2026, Mozilla is affected by vulnerabilities in the following products:</p>

<ul><li>Firefox ESR
	<ul><li>Versions prior to 115.40</li>
		<li>Versions prior to 140.15</li>
		<li>Versions prior to 153.2</li>
	</ul></li>
	<li>Firefox
	<ul><li>Versions prior to 155</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.mozilla.org/en-US/security/advisories/mfsa2026-83/">Security Vulnerabilities fixed in Firefox ESR 115.40 — Mozilla</a></li>
	<li><a href="https://www.mozilla.org/en-US/security/advisories/mfsa2026-84/">Security Vulnerabilities fixed in Firefox ESR 140.15 — Mozilla</a></li>
	<li><a href="https://www.mozilla.org/en-US/security/advisories/mfsa2026-85/">Security Vulnerabilities fixed in Firefox ESR 153.2 — Mozilla</a></li>
	<li><a href="https://www.mozilla.org/en-US/security/advisories/mfsa2026-82/">Security Vulnerabilities fixed in Firefox 155 — Mozilla</a></li>
	<li><a href="https://www.mozilla.org/en-US/security/advisories/">Mozilla Foundation Security Advisories — Mozilla</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-866</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-866"/><title><![CDATA[WebPros security advisory (AV26-866)]]></title><updated>2026-09-01T13:34:50Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8165" about="/en/alerts-advisories/webpros-security-advisory-av26-866" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-866<br /><strong>Date: </strong>September 1, 2026</p>

<p>As of September 1, 2026, WebPros is affected by vulnerabilities in the following product:</p>

<ul><li>Plesk
	<ul><li>Prior to 18.0.79.9</li>
		<li>Prior to 18.0.80.5</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://support.plesk.com/hc/en-us/articles/42968165026967-CVE-2026-67394-Vulnerability-in-Plesk-allows-privilege-escalation-to-root">CVE-2026-67394: Vulnerability in Plesk allows privilege escalation to root</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-865</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-865"/><title><![CDATA[WatchGuard security advisory (AV26-865)]]></title><updated>2026-08-31T19:00:31Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8164" about="/en/alerts-advisories/watchguard-security-advisory-av26-865" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-865<br /><strong>Date:</strong> August 31, 2026</p>

<p>As of August 27, 2026, WatchGuard is affected by vulnerabilities in the following products:</p>

<ul><li>Dimension
	<ul><li>Prior to 2.3.1</li>
	</ul></li>
	<li>Fireware OS
	<ul><li>Prior to 12.12.2</li>
		<li>Prior to 12.5.20</li>
		<li>Prior to 2026.2.2</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://psirt.watchguard.com/">WatchGuard Security Advisories</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/papercut-security-advisory-av26-858</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/papercut-security-advisory-av26-858"/><title><![CDATA[PaperCut security advisory (AV26-858) – Update 2]]></title><updated>2026-08-31T16:00:58Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8156" about="/en/alerts-advisories/papercut-security-advisory-av26-858" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-858<br /><strong>Date: </strong>August 28, 2026<br /><strong>Updated:</strong> August 31, 2026</p>

<p>As of August 27, 2026, PaperCut is affected by vulnerabilities in the following products:</p>

<ul><li>PaperCut MF
	<ul><li>Prior to v24 Emergency Patch Release 2</li>
		<li>Prior to v25 Emergency Patch Release 2</li>
		<li>Prior to v26 Emergency Patch Release 2</li>
	</ul></li>
	<li>PaperCut NG
	<ul><li>Prior to v24 Emergency Patch Release 2</li>
		<li>Prior to v25 Emergency Patch Release 2</li>
		<li>Prior to v26 Emergency Patch Release 2</li>
	</ul></li>
</ul><h2 class="h3">Update 1</h2>

<p>Open-source reporting indicates that CVE-2026-81578 and CVE-2026-82078 are related to PaperCut MF and PaperCut NG are being exploited in the wild.</p>

<h2 class="h3">Update 2</h2>

<p>On August 31, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-81578 and CVE-2026-82078 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/">URGENT Security Advisory: PaperCut NG/MF Security Bulletin (27 Aug 2026)</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-81578">CISA KEV: CVE-2026-81578</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-82078">CISA KEV: CVE-2026-82078</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/control-systems-siemens-security-advisory-av26-864</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/control-systems-siemens-security-advisory-av26-864"/><title><![CDATA[[Control Systems] Siemens security advisory (AV26-864)]]></title><updated>2026-08-31T15:59:15Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8163" about="/en/alerts-advisories/control-systems-siemens-security-advisory-av26-864" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-864<br /><strong>Date:</strong> August 31, 2026</p>

<p>As of August 27, 2026, Siemens is affected by a vulnerability in the following products:</p>

<ul><li>Element maps-ng V47
	<ul><li>Prior to V47.12.3</li>
	</ul></li>
	<li>Element maps-ng V48
	<ul><li>Prior to V48.11.3</li>
	</ul></li>
	<li>Element maps-ng V49
	<ul><li>Prior to V49.16.1</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://cert-portal.siemens.com/productcert/html/ssa-682041.html">SSA-682041</a></li>
	<li><a href="https://www.siemens.com/en-us/content/cert-services/">CERT Services | Siemens</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/dell-security-advisory-av26-863</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/dell-security-advisory-av26-863"/><title><![CDATA[Dell security advisory (AV26-863)]]></title><updated>2026-08-31T15:55:51Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8162" about="/en/alerts-advisories/dell-security-advisory-av26-863" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-863<br /><strong>Date:</strong> August 31, 2026</p>

<p>As of August 28, 2026, Dell is affected by vulnerabilities in the following products:</p>

<ul><li>Dell PowerEdge Server for Intel Processor Firmware
	<ul><li>Multiple versions and models</li>
	</ul></li>
	<li>Dell AppSync
	<ul><li>Prior to or equal to 4.6.0.4 and 4.6.1.0</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.dell.com/support/kbdoc/en-ca/000502468/dsa-2026-356-security-update-for-dell-poweredge-server-for-intel-processor-firmware-vulnerability">DSA-2026-356: Security Update for Dell PowerEdge Server for Intel® Processor Firmware Vulnerability</a></li>
	<li><a href="https://www.dell.com/support/kbdoc/en-ca/000502484/dsa-2026-165-security-update-for-dell-appsync-vulnerabilities">DSA-2026-165: Security Update for Dell AppSync Vulnerabilities</a></li>
	<li><a href="https://www.dell.com/support/security/en-ca?lwp=rt">Security Advisories, Notices and Resources | Dell Canada</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/ibm-security-advisory-av26-862</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/ibm-security-advisory-av26-862"/><title><![CDATA[IBM security advisory (AV26-862)]]></title><updated>2026-08-31T15:52:14Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8161" about="/en/alerts-advisories/ibm-security-advisory-av26-862" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-862<br /><strong>Date:</strong> August 31, 2026</p>

<p>As of August 28, 2026, IBM is affected by vulnerabilities in the following products:</p>

<ul><li>SPSS Collaboration and Deployment Services
	<ul><li>Multiple versions</li>
	</ul></li>
	<li>IBM SPSS Analytic Server
	<ul><li>Multiple version</li>
	</ul></li>
	<li>IBM MQ Agent
	<ul><li>Multiple versions</li>
	</ul></li>
	<li>IBM Maximo Application Suite - Monitor Component
	<ul><li>Prior to or equal to 9.2, 9.1 and 9.0</li>
	</ul></li>
	<li>IBM Observability with Instana (Agent)
	<ul><li>Prior to or equal to 1.0.323</li>
	</ul></li>
	<li>IBM Financial Transaction Manager (FTM) for RedHat OpenShift
	<ul><li>Multiple versions</li>
	</ul></li>
	<li>IBM Engineering Test Management
	<ul><li>Prior to equal to 7.2, 7.1 and 7.0.3</li>
	</ul></li>
	<li>IBM Control Center
	<ul><li>Prior to or equal to v6.3.1.0</li>
	</ul></li>
	<li>IBM Concert Software
	<ul><li>Prior to or equal to 2.3.1</li>
	</ul></li>
	<li>IBM Tivoli System Automation Application Manager 4.1
	<ul><li>Versions WebSphere Application Server 8.5 and 9.0</li>
	</ul></li>
	<li>SPSS Collaboration and Deployment Services
	<ul><li>Multiple versions</li>
	</ul></li>
	<li>IBM Sovereign Core
	<ul><li>Prior to or equal to 1.1</li>
	</ul></li>
	<li>IBM Maximo Application Suite - Cluster Performance Insights
	<ul><li>Prior to or equal to 9.2</li>
	</ul></li>
	<li>IBM Transformation Advisor
	<ul><li>Prior to or equal to 5.0.0</li>
	</ul></li>
	<li>IBM Application Modernization Accelerator
	<ul><li>Prior to or equal to 5.0.0</li>
	</ul></li>
	<li>IBM webMethods Integration (on prem)
	<ul><li>Prior to or equal to 10.15,11.1 and 12.1</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.</p>

<ul class="list-unstyled"><li><a href="https://www.ibm.com/support/pages/bulletin/">IBM Product Security Incident Response</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-861</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-861"/><title><![CDATA[WebPros security advisory (AV26-861)]]></title><updated>2026-08-28T15:10:37Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8159" about="/en/alerts-advisories/webpros-security-advisory-av26-861" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-861<br /><strong>Date: </strong>August 28, 2026</p>

<p>As of August 27, 2026, WebPros is affected by vulnerabilities in the following products:</p>

<ul><li>cPanel &amp; WebHost Manager (WHM) software
	<ul><li>Prior to 11.110.0.141</li>
		<li>Prior to 11.134.0.53</li>
		<li>Prior to 11.136.0.37</li>
		<li>Prior to 11.138.0.2</li>
		<li>Prior to WP2: 11.138.1.7</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available</p>

<ul class="list-unstyled"><li><a href="https://support.cpanel.net/hc/en-us/articles/42959571221527-Security-CVE-2026-65643-Vulnerability-in-cPanel-s-Domain-Parking-Functionality-August-27-2026">Security: CVE-2026-65643 Vulnerability in cPanel’s Domain Parking Functionality - August 27, 2026</a></li>
	<li><a href="https://support.cpanel.net/hc/en-us/sections/360007088193-Security">cPanel Security</a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-860</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-860"/><title><![CDATA[Grafana security advisory (AV26-860)]]></title><updated>2026-08-28T14:58:34Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8158" about="/en/alerts-advisories/grafana-security-advisory-av26-860" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-860<br /><strong>Date: </strong>August 28, 2026</p>

<p>As of August 27, 2026, Grafana is affected by a vulnerability in the following product:</p>

<ul><li>Alloy
	<ul><li>Prior to or equal to 1.18.1</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://grafana.com/tags/security/">Grafana: The open and composable observability platform | Grafana Labs</a></li>
	<li><a href="https://www.cve.org/CVERecord?id=CVE-2026-75889">CVE-2026-19516 CVE Record</a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/redis-security-advisory-av26-859</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/redis-security-advisory-av26-859"/><title><![CDATA[Redis security advisory (AV26-859)]]></title><updated>2026-08-28T14:34:41Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8157" about="/en/alerts-advisories/redis-security-advisory-av26-859" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-859<br /><strong>Date: </strong>August 28, 2026</p>

<p>As of August 27, 2026, <span lang="en" xml:lang="en" xml:lang="en">Redis</span> is affected by a vulnerability in the following product:</p>

<ul><li><span lang="en" xml:lang="en" xml:lang="en">Redis</span>

	<ul><li>8.0</li>
		<li>All except 8.10.1</li>
		<li>All except 8.2.9</li>
		<li>All except 8.4.6</li>
		<li>All except 8.6.6</li>
		<li>All except 8.8.2</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834">Fix use-after-free in tlsProcessPendingData() pending-list iteration</a></li>
	<li><a href="https://github.com/redis/redis/releases">GitHub Releases</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/servicenow-security-advisory-av26-857</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/servicenow-security-advisory-av26-857"/><title><![CDATA[ServiceNow security advisory (AV26-857)]]></title><updated>2026-08-28T13:43:29Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8155" about="/en/alerts-advisories/servicenow-security-advisory-av26-857" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-857<br /><strong>Date: </strong>August 28, 2026</p>

<p>As of August 27, 2026, ServiceNow is affected by vulnerabilities in the following products:</p>

<ul><li>Xanadu
	<ul><li>Versions prior to Patch 11 Hot Fix 7a</li>
	</ul></li>
	<li>Yokohama
	<ul><li>Versions prior to Yokohama Patch 12 Hot Fix 3b</li>
		<li>Versions prior to Yokohama Patch 13 Hot Fix 4</li>
	</ul></li>
	<li>Zurich
	<ul><li>Multiple versions</li>
	</ul></li>
	<li>Australia
	<ul><li>Multiple versions</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://support.servicenow.com/kb?id=kb_article_view&amp;sysparm_article=KB3152242">August 2026 CVE Advisory Notification</a></li>
	<li><a href="https://support.servicenow.com/kb?id=kb_article_view&amp;sysparm_article=KB1226057 ">ServiceNow security advisories</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/control-systems-national-instruments-security-advisory-av26-856</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/control-systems-national-instruments-security-advisory-av26-856"/><title><![CDATA[[Control Systems] National Instruments security advisory (AV26-856)]]></title><updated>2026-08-28T12:16:59Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8154" about="/en/alerts-advisories/control-systems-national-instruments-security-advisory-av26-856" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-856<br /><strong>Date: </strong>August 28, 2026</p>

<p>As of August 25, 2026, National Instruments is affected by vulnerabilities in the following product:</p>

<ul><li>LabVIEW
	<ul><li>Prior to 23.0.0</li>
		<li>Prior to 23.3.10</li>
		<li>Prior to 24.3.7</li>
		<li>Prior to 25.3.5</li>
		<li>Prior to 26.3.1</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/memory-corruption-vulnerabilities-ni-labview.html">Memory Corruption Vulnerabilities in NI LabVIEW - NI</a></li>
	<li><a href="https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/integer-conversion-vulnerability-resulting-in-an-out-of-bounds-read-in-ni-labview.html">Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW - NI</a></li>
	<li><a href="https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/integer-overflow-vulnerability-resulting-in-an-out-of-bounds-write-in-ni-labview.html">Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW - NI</a></li>
	<li><a href="https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026.html">Available Security Updates for NI Software: 2026 - NI</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-august-2026-monthly-rollup-av26-804</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-august-2026-monthly-rollup-av26-804"/><title><![CDATA[Microsoft security advisory – August 2026 monthly rollup (AV26-804) – Update 2]]></title><updated>2026-08-27T17:23:07Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8100" about="/en/alerts-advisories/microsoft-security-advisory-august-2026-monthly-rollup-av26-804" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-804<br /><strong>Date:</strong> August 11, 2026<br /><strong>Updated:</strong> August 27, 2026</p>

<p>As of August 11, 2026, Microsoft is affected by vulnerabilities in the following products:</p>

<ul><li>.NET 10.0 installed on Linux</li>
	<li>.NET 10.0 installed on Mac OS</li>
	<li>.NET 10.0 installed on Windows</li>
	<li>.NET 8.0 installed on Linux</li>
	<li>.NET 8.0 installed on Mac OS</li>
	<li>.NET 8.0 installed on Windows</li>
	<li>.NET 9.0 installed on Linux</li>
	<li>.NET 9.0 installed on Mac OS</li>
	<li>.NET 9.0 installed on Windows</li>
	<li>App Installer</li>
	<li>Application Insights Profiler</li>
	<li>Azure Active Directory</li>
	<li>Azure Confidential Ledger</li>
	<li>Azure CycleCloud</li>
	<li>Azure Kubernetes Service</li>
	<li>Azure Logic Apps</li>
	<li>Azure Monitor Agent Linux Extension</li>
	<li>Azure SQL Database</li>
	<li>Azure SQL Managed Instance</li>
	<li>Azure SRE Agent</li>
	<li>Azure Service Bus</li>
	<li>Azure Storage Explorer</li>
	<li>Microsoft .NET Framework 3.5</li>
	<li>Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2</li>
	<li>Microsoft .NET Framework 3.5 AND 4.7.2</li>
	<li>Microsoft .NET Framework 3.5 AND 4.8</li>
	<li>Microsoft .NET Framework 3.5 AND 4.8.1</li>
	<li>Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2</li>
	<li>Microsoft .NET Framework 4.8</li>
	<li>Microsoft .NET Framework 4.8.1</li>
	<li>Microsoft 365 Admin Center</li>
	<li>Microsoft 365 Apps for Enterprise</li>
	<li>Microsoft Access 2016</li>
	<li>Microsoft Defender for Endpoint for Mac</li>
	<li>Microsoft Dynamics 365 (on-premises)</li>
	<li>Microsoft Dynamics 365 Business Central 2024</li>
	<li>Microsoft Dynamics 365 Business Central 2026</li>
	<li>Microsoft Dynamics 365 Business Central Release Wave 1 2025</li>
	<li>Microsoft Dynamics 365 Business Central Release Wave 2 2025</li>
	<li>Microsoft Entra Connect</li>
	<li>Microsoft Entra ID</li>
	<li>Microsoft Entra Provisioning Service</li>
	<li>Microsoft Excel 2016</li>
	<li>Microsoft Exchange Server 2016</li>
	<li>Microsoft Exchange Server 2019</li>
	<li>Microsoft Exchange Server Subscription Edition RTM</li>
	<li>Microsoft Office 2016</li>
	<li>Microsoft Office 2019</li>
	<li>Microsoft Office 365 for Mac</li>
	<li>Microsoft Office LTSC 2021</li>
	<li>Microsoft Office LTSC 2024</li>
	<li>Microsoft Office LTSC for Mac 2021</li>
	<li>Microsoft Office LTSC for Mac 2024</li>
	<li>Microsoft Outlook 2016</li>
	<li>Microsoft Planetary Computer Pro (GeoCatalog)</li>
	<li>Microsoft Power Apps</li>
	<li>Microsoft PowerPoint 2016</li>
	<li>Microsoft Purview eDiscovery</li>
	<li>Microsoft SharePoint Enterprise Server 2016</li>
	<li>Microsoft SharePoint Online</li>
	<li>Microsoft SharePoint Server 2019</li>
	<li>Microsoft SharePoint Server Subscription Edition</li>
	<li>Microsoft Teams</li>
	<li>Microsoft Teams for Android</li>
	<li>Microsoft Teams for iOS</li>
	<li>Microsoft Visual Studio 2022</li>
	<li>Microsoft Visual Studio 2026</li>
	<li>Microsoft Visual Studio Code CoPilot Chat Extension</li>
	<li>Microsoft Word 2016</li>
	<li>OneDrive for MacOS</li>
	<li>Power BI Report Server</li>
	<li>PowerShell 7.4</li>
	<li>PowerShell 7.5</li>
	<li>PowerShell 7.6</li>
	<li>Python extension for Visual Studio Code</li>
	<li>Visual Studio Code</li>
	<li>Windows 10</li>
	<li>Windows 11</li>
	<li>Windows App Client for Windows Desktop</li>
	<li>Windows Server 2012</li>
	<li>Windows Server 2012 R2</li>
	<li>Windows Server 2016</li>
	<li>Windows Server 2019</li>
	<li>Windows Server 2022</li>
	<li>Windows Server 2025</li>
</ul><p>The Cyber Centre encourages users and administrators to review the web link provided, perform the suggested mitigations, and apply the necessary updates.</p>

<h2 class="h3">Update 1</h2>

<p>On August 18, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-33824 and CVE-2026-55040 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<h2 class="h3">Update 2</h2>

<p>Open-source reporting indicates that CVE-2026-63520 related to Microsoft SharePoint Server is being exploited in the wild.</p>

<ul class="list-unstyled"><li><a href="https://msrc.microsoft.com/update-guide/releaseNote/2026-Aug">August 2026 Security Updates</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33824">CISA KEV: CVE-2026-33824</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-55040">CISA KEV: CVE-2026-55040</a></li>
</ul><!--CUT & PASTE the French version info --><p> </p>
</div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/veeam-security-advisory-av26-855</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/veeam-security-advisory-av26-855"/><title><![CDATA[Veeam security advisory (AV26-855)]]></title><updated>2026-08-27T14:03:14Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8153" about="/en/alerts-advisories/veeam-security-advisory-av26-855" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-855<br /><strong>Date: </strong>August 27, 2026</p>

<p>As of August 25, 2026, Veeam is affected by vulnerabilities in the following products:</p>

<ul><li>Backup and Replication
	<ul><li>Prior to 13.0.3 (build 13.0.3.63)</li>
		<li>Prior to 13.1 (build 13.1.0.411)</li>
	</ul></li>
	<li>ONE
	<ul><li>Prior to or equal to 13.0.2.6723</li>
		<li>Prior to or equal to 13.1.0.7034</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.veeam.com/kb4902">KB4902: Vulnerability Resolved in Veeam Backup &amp; Replication 13.1</a></li>
	<li><a href="https://www.veeam.com/kb4905">KB4905: Vulnerability Resolved in Veeam ONE 13.1 Patch 0</a></li>
	<li><a href="https://www.veeam.com/knowledge-base.html?type=security">Veeam Support Knowledge Base</a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-854</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-854"/><title><![CDATA[WebPros security advisory (AV26-854)]]></title><updated>2026-08-27T12:57:33Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8152" about="/en/alerts-advisories/webpros-security-advisory-av26-854" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-854<br /><strong>Date: </strong>August 27, 2026</p>

<p>As of August 26, 2026, WebPros is affected by vulnerabilities in the following products:</p>

<ul><li>Plesk
	<ul><li>Prior to 18.0.79.8</li>
		<li>Prior to 18.0.80.4</li>
	</ul></li>
	<li>Plesk Migrator
	<ul><li>Prior to 2.36.0</li>
	</ul></li>
	<li>Plesk Site Import
	<ul><li>Prior to 1.12.1</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://support.plesk.com/hc/en-us/articles/42844242102679-Vulnerability-CVE-2026-65642-in-Plesk-s-database-management-interface">Vulnerability CVE-2026-65642 in Plesk's database management interface</a></li>
	<li><a href="https://support.plesk.com/hc/en-us/articles/42871001389207-Vulnerability-CVE-2026-65647-in-Plesk-s-Site-Import-and-Migrator-extensions ">Vulnerability CVE-2026-65647 in Plesk's Site Import and Migrator extensions</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/sonicwall-security-advisory-av26-853</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/sonicwall-security-advisory-av26-853"/><title><![CDATA[SonicWall security advisory (AV26-853)]]></title><updated>2026-08-27T12:44:22Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8151" about="/en/alerts-advisories/sonicwall-security-advisory-av26-853" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-853<br /><strong>Date: </strong>August 26, 2026</p>

<p>As of August 25, 2026, SonicWall is affected by vulnerabilities in the following product:</p>

<ul><li>NetExtender Linux Client
	<ul><li>3.5 and earlier versions</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0013">Security Advisory</a></li>
	<li><a href="https://psirt.global.sonicwall.com/vuln-list">SonicWall Security Advisories</a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-645</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-645"/><title><![CDATA[Citrix security advisory (AV26-645) – Update 3]]></title><updated>2026-08-26T18:27:03Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="7922" about="/en/alerts-advisories/citrix-security-advisory-av26-645" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-645<br /><strong>Date:</strong> June 30, 2026<br /><strong>Updated:</strong> August 26, 2026</p>

<p>On June 30, 2026, Citrix published a security advisory to address critical vulnerabilities in the following products:</p>

<ul><li>NetScaler ADC and NetScaler Gateway - versions 14.1 before 14.1-72.61</li>
	<li>NetScaler ADC and NetScaler Gateway - versions 13.1 before 13.1-63.18</li>
	<li>NetScaler ADC FIPS – versions before 14.1-72.61 FIPS</li>
	<li>NetScaler ADC FIPS and NDcPP – versions before 13.1-37.272</li>
</ul><h2 class="h3">Update 1</h2>

<p>Open-source reporting indicates that CVE-2026-8451 is being exploited.</p>

<h2 class="h3">Update 2</h2>

<p>Open-source reporting indicates that CVE-2026-8452 is being exploited in the wild.</p>

<h2 class="h3">Update 3</h2>

<p>On August 26, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-8452 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<p>The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.</p>

<ul class="list-unstyled"><li><a href="https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604">NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474</a></li>
	<li><a href="https://support.citrix.com/support-home/topic-article-list?trendingCategory=20&amp;trendingTopicName=Security%20Bulletin">Citrix Security Advisories</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-8452">CISA KEV: CVE-2026-8452</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/teamviewer-security-advisory-av26-852</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/teamviewer-security-advisory-av26-852"/><title><![CDATA[TeamViewer security advisory (AV26-852)]]></title><updated>2026-08-26T17:33:37Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8150" about="/en/alerts-advisories/teamviewer-security-advisory-av26-852" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-852<br /><strong>Date: </strong>August 26, 2026</p>

<p>As of August 26, 2026, TeamViewer is affected by vulnerabilities in the following products:</p>

<ul><li>TeamViewer Full Client
	<ul><li>Multiple versions and platforms</li>
	</ul></li>
	<li>TeamViewer Host
	<ul><li>Multiple versions and platforms</li>
	</ul></li>
	<li>TeamViewer Portable
	<ul><li>Prior to version 15.64.7</li>
	</ul></li>
	<li>TeamViewer QuickSupport
	<ul><li>Multiple versions and platforms</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.teamviewer.com/de/resources/trust-center/security-bulletins/tv-2026-1008/">TV-2026-1008</a></li>
	<li><a href="https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2026-1009/">TV-2026-1009</a></li>
	<li><a href="https://www.teamviewer.com/en-ca/resources/trust-center/security-bulletins/">Security bulletins | TeamViewer</a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/nextjs-security-advisory-av26-851</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/nextjs-security-advisory-av26-851"/><title><![CDATA[Next.js security advisory (AV26-851)]]></title><updated>2026-08-26T17:13:59Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8148" about="/en/alerts-advisories/nextjs-security-advisory-av26-851" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-851<br /><strong>Date: </strong>August 26, 2026</p>

<p>As of August 25, 2026, Next.js is affected by critical vulnerabilities in the following product:</p>

<ul><li>Next.js
	<ul><li>Version 15.5 prior to 15.5.24</li>
		<li>Version 16.3 prior to 16.3.3</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the web link provided and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://nextjs.org/blog/august-2026-security-release">August 2026 Security Release</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/ubiquiti-security-advisory-av26-850</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/ubiquiti-security-advisory-av26-850"/><title><![CDATA[Ubiquiti security advisory (AV26-850)]]></title><updated>2026-08-26T17:11:47Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8149" about="/en/alerts-advisories/ubiquiti-security-advisory-av26-850" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-850<br /><strong>Date: </strong>August 26, 2026</p>

<p>As of August 26, 2026, Ubiquiti is affected by critical vulnerabilities in the following products:</p>

<ul><li>UniFi OS Server
	<ul><li>Prior to or equal to 5.1.21</li>
	</ul></li>
	<li>UniFi Connect Application
	<ul><li>Prior to or equal to 3.24.20</li>
	</ul></li>
	<li>UniFi Network Application
	<ul><li>Prior to or equal to 10.4.57</li>
	</ul></li>
	<li>UID Enterprise Agent
	<ul><li>Prior to or equal to 1.61.8</li>
	</ul></li>
	<li>UniFi Access Application
	<ul><li>Prior to or equal to 4.3.3</li>
	</ul></li>
	<li>UniFi Protect Application
	<ul><li>Prior to or equal to 7.1.87</li>
	</ul></li>
	<li>UniFi Connect Display Cast Pro
	<ul><li>Prior to or equal to 1.0.108</li>
	</ul></li>
	<li>UniFi Enterprise Audio/Video Bridge
	<ul><li>Prior to or equal to 1.0.10</li>
	</ul></li>
	<li>UniFi Talk Application
	<ul><li>Prior to or equal to 5.2.7</li>
	</ul></li>
	<li>UniFi Protect AI Key
	<ul><li>Prior to or equal to 2.1.3</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9">Ubiquiti UniFi - Security Advisory Bulletin 067</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/nvidia-security-advisory-av26-849</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/nvidia-security-advisory-av26-849"/><title><![CDATA[NVIDIA security advisory (AV26-849)]]></title><updated>2026-08-26T14:17:01Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8147" about="/en/alerts-advisories/nvidia-security-advisory-av26-849" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-849<br /><strong>Date: </strong>August 26, 2026</p>

<p>As of August 25, 2026, NVIDIA is affected by vulnerabilities in the following product:</p>

<ul><li>NVIDIA <span lang="en" xml:lang="en" xml:lang="en">NemoClaw and OpenShell</span>

	<ul><li>Multiple versions</li>
	</ul></li>
	<li>NVIDIA <span lang="en" xml:lang="en" xml:lang="en">Unified Fabric Manager</span>
	<ul><li>Multiple versions and models</li>
	</ul></li>
	<li>NVIDIA DGX <span lang="en" xml:lang="en" xml:lang="en">Spark</span>
	<ul><li>Versions prior to 1.110.13</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://nvidia.custhelp.com/app/answers/detail/a_id/5872">Security Bulletin: NVIDIA NemoClaw and OpenShell - August 2026</a></li>
	<li><a href="https://nvidia.custhelp.com/app/answers/detail/a_id/5809">Security Bulletin: NVIDIA Unified Fabric Manager - August 2026</a></li>
	<li><a href="https://nvidia.custhelp.com/app/answers/detail/a_id/5867">Security Bulletin: NVIDIA DGX Spark - August 2026</a></li>
	<li><a href="https://github.com/NVIDIA/product-security/tree/main/2026/5872">product-security/2026/5872 at main · NVIDIA/product-security · GitHub</a></li>
	<li><a href="https://www.nvidia.com/en-us/security/">NVIDIA Product Security</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-848</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-848"/><title><![CDATA[Adobe security advisory (AV26-848)]]></title><updated>2026-08-26T13:56:44Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8146" about="/en/alerts-advisories/adobe-security-advisory-av26-848" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-848<br /><strong>Date: </strong>August 26, 2026</p>

<p>As of August 25, 2026, Adobe is affected by vulnerabilities in the following products:</p>

<ul><li>Adobe Campaign Classic
	<ul><li>Prior to or equal to ACC v7: 7.4.4 build 9400</li>
	</ul></li>
	<li>Adobe Substance 3D Designer
	<ul><li>Prior to or equal to 16.0.4</li>
	</ul></li>
	<li>Adobe Substance 3D Painter
	<ul><li>Prior to or equal to 12.1.2</li>
	</ul></li>
	<li>Adobe Substance 3D Sampler
	<ul><li>Prior to or equal to 6.0.1</li>
	</ul></li>
	<li>Adobe XD
	<ul><li>Prior to or equal to 60</li>
	</ul></li>
	<li>C2PA Tool
	<ul><li>Prior to or equal to c2patool-v0.26.70</li>
	</ul></li>
	<li>Content Credentials Rust SDK
	<ul><li>Prior to or equal to c2pa-v0.89.0</li>
	</ul></li>
	<li>Illustrator 2025
	<ul><li>Prior to or equal to 29.8.9</li>
	</ul></li>
	<li>Illustrator 2026
	<ul><li>Prior to or equal to 30.6</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://helpx.adobe.com/security/Home.html">Adobe Product Security Incident Response Team</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-847</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-847"/><title><![CDATA[WatchGuard security advisory (AV26-847)]]></title><updated>2026-08-25T19:09:53Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8145" about="/en/alerts-advisories/watchguard-security-advisory-av26-847" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-847<br /><strong>Date: </strong>August 25, 2026</p>

<p>As of August 19, 2026, WatchGuard is affected by vulnerabilities in the following product:</p>

<ul><li>WatchGuard Agent
	<ul><li>Prior to 1.25.13.0000</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.watchguard.com/support/release-notes/Cloud/Content/en-US/Endpoint-Security/Endpoint-Security-Prime-resolved_issues.html">WatchGuard Endpoint Security Prime Enhancements and Resolved Issues</a></li>
	<li><a href="https://www.watchguard.com/wgrd-psirt/advisories">Security Advisories | WatchGuard Technologies </a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/openssl-security-advisory-av26-846</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/openssl-security-advisory-av26-846"/><title><![CDATA[OpenSSL security advisory (AV26-846)]]></title><updated>2026-08-25T18:55:13Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8144" about="/en/alerts-advisories/openssl-security-advisory-av26-846" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-846<br /><strong>Date: </strong>August 25, 2026</p>

<p>As of August 25, 2026, OpenSSL is affected by vulnerabilities in the following product:</p>

<ul><li>OpenSSL
	<ul><li>Prior to 1.0.2zr</li>
		<li>Prior to 1.1.1zi</li>
		<li>Prior to 3.0.22</li>
		<li>Prior to 3.4.7</li>
		<li>Prior to 3.5.8</li>
		<li>Prior to 3.6.4</li>
		<li>Prior to 4.0.2</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://openssl-library.org/news/vulnerabilities/">Vulnerabilities | OpenSSL Library</a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/gitea-security-advisory-av26-845</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/gitea-security-advisory-av26-845"/><title><![CDATA[Gitea security advisory (AV26-845)]]></title><updated>2026-08-25T18:29:34Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8143" about="/en/alerts-advisories/gitea-security-advisory-av26-845" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-845<br /><strong>Date: </strong>August 25, 2026</p>

<p>As of August 14, 2026, Gitea is affected by vulnerabilities in the following product:</p>

<ul><li>Gitea
	<ul><li>Prior to 1.27.1</li>
	</ul></li>
</ul><p>On August 25, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-60004 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m">Remote Code Execution via diffpatch Git Hook Installation</a></li>
	<li><a href="https://blog.gitea.com/release-of-1.27.1/">Gitea 1.27.1 is released</a></li>
	<li><a href="https://blog.gitea.com/release-of-1.27.2/">Gitea 1.27.2 is released</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-60004">CISA KEV: CVE-2026-60004</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-844</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-844"/><title><![CDATA[Google security advisory (AV26-844)]]></title><updated>2026-08-24T19:03:22Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8142" about="/en/alerts-advisories/google-security-advisory-av26-844" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-844<br /><strong>Date: </strong>August 24, 2026</p>

<p>As of August 20, 2026, Google is affected by vulnerabilities in the following product:</p>

<ul><li>Chrome
	<ul><li>Prior to 151.0.7922.173</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0404570826.html">Google Chrome Security Advisory</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/oracle-security-advisory-january-2026-quarterly-rollup-av26-042</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/oracle-security-advisory-january-2026-quarterly-rollup-av26-042"/><title><![CDATA[Oracle security advisory – January 2026 quarterly rollup (AV26-042) – Update 2]]></title><updated>2026-08-24T18:42:49Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="7185" about="/en/alerts-advisories/oracle-security-advisory-january-2026-quarterly-rollup-av26-042" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-042<br /><strong>Date: </strong>January 21, 2026<br /><strong>Updated: </strong>August 24, 2026</p>

<p>On January 20, 2026, Oracle published a security advisory to address vulnerabilities in multiple products.</p>

<h2>Update 1</h2>

<p class="mrgn-bttm-md">On January 21, 2026, a proof of concept (PoC) for the vulnerability CVE-2026-21962 became publicly available.</p>

<p class="mrgn-bttm-md">CVE-2026-21962 is a vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware which may allow a remote attacker to obtain unauthorized access.</p>

<h2>Update 2</h2>

<p class="mrgn-bttm-md">On August 24, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-21962 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.</p>

<ul class="list-unstyled"><li><a href="https://www.oracle.com/security-alerts/cpujan2026.html">Oracle Critical Patch Update Advisory – January 2026</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21962">CISA KEV: CVE-2026-21962</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/dell-security-advisory-av26-843</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/dell-security-advisory-av26-843"/><title><![CDATA[Dell security advisory (AV26-843)]]></title><updated>2026-08-24T13:12:11Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8141" about="/en/alerts-advisories/dell-security-advisory-av26-843" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-843<br /><strong>Date: </strong>August 24, 2026</p>

<p>As of August 17, 2026, Dell is affected by vulnerabilities in the following products:</p>

<ul><li>Alienware Command Center (AWCC)
	<ul><li>Prior to 6.14.20.0</li>
	</ul></li>
	<li>Dell Command Update (DCU)
	<ul><li>Prior to 5.7.1</li>
	</ul></li>
	<li>Dell Cyber Detect OVA
	<ul><li>Prior to 20.3.0</li>
	</ul></li>
	<li>Dell Networking OS10
	<ul><li>Prior to 10.5.6.14</li>
	</ul></li>
	<li>Dell Device Management Agent (DDMA)
	<ul><li>Prior to 26.06</li>
	</ul></li>
	<li>Dell ThinOS10
	<ul><li>Multiple versions and models</li>
	</ul></li>
	<li>Metro Node
	<ul><li>Prior to 4.6.0.4</li>
	</ul></li>
	<li>ObjectScale
	<ul><li>Prior to 4.3.0.1</li>
	</ul></li>
	<li>OpenManage Enterprise
	<ul><li>Prior to 4.7.0</li>
	</ul></li>
	<li>PowerPath for Windows
	<ul><li>Prior to 8.0 SP2</li>
	</ul></li>
	<li>PowerScale OneFS
	<ul><li>Prior to 14.1</li>
	</ul></li>
	<li>Power Protect Cyber Recovery
	<ul><li>Multiple versions</li>
	</ul></li>
	<li>PowerStoreT OS (multiple models)
	<ul><li>Prior to 5.0.0.2-2761110</li>
	</ul></li>
	<li>RecoverPoint for Virtual Machines
	<ul><li>Prior to 6.1</li>
	</ul></li>
	<li>UCC Edge
	<ul><li>Prior to 3.0.2</li>
	</ul></li>
	<li>Watchdog Timer Driver
	<ul><li>Prior to 2.0.0.1</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.dell.com/support/security/en-ca?lwp=rt">Security Advisories, Notices and Resources | Dell Canada</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-827</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-827"/><title><![CDATA[GitLab security advisory (AV26-827) – Update 1]]></title><updated>2026-08-21T21:04:28Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8125" about="/en/alerts-advisories/gitlab-security-advisory-av26-827" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-827<br /><strong>Date: </strong>August 18, 2026<br /><strong>Updated:</strong> August 21, 2026</p>

<p>As of August 17, 2026, GitLab is affected by vulnerabilities in the following product:</p>

<ul><li>GitLab
	<ul><li>Prior to 18.11.11</li>
		<li>Prior to 19.0.8</li>
		<li>Prior to 19.1.6</li>
		<li>Prior to 19.2.4</li>
	</ul></li>
</ul><h2 class="h3">Update 1</h2>

<p>Open-source reporting indicates that CVE-2026-19478 is being exploited in the wild.</p>

<p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/">GitLab Critical Patch Release: 19.2.4, 19.1.6, 19.0.8, 18.11.11 | GitLab Docs</a></li>
	<li><a href="https://docs.gitlab.com/releases/">GitLab release notes | GitLab Docs</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-842</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-842"/><title><![CDATA[Spring security advisory (AV26-842)]]></title><updated>2026-08-21T20:52:54Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8140" about="/en/alerts-advisories/spring-security-advisory-av26-842" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-842<br /><strong>Date: </strong>August 21, 2026</p>

<p>As of August 20, 2026, Spring is affected by vulnerabilities in the following products:</p>

<ul><li>Spring AI
	<ul><li>Prior to or equal to 2.0.0</li>
		<li>Prior to or equal to 1.0.9</li>
		<li>Prior to or equal to 1.1.8</li>
	</ul></li>
	<li>Spring Security
	<ul><li>Multiple versions</li>
	</ul></li>
</ul><ul><li>Spring Cloud Config
	<ul><li>Multiple versions</li>
	</ul></li>
</ul><ul><li>Spring Data REST
	<ul><li>Multiple versions</li>
	</ul></li>
</ul><ul><li>Spring Cloud Gateway
	<ul><li>Multiple versions</li>
	</ul></li>
</ul><ul><li>Spring Cloud Commons
	<ul><li>Multiple versions</li>
	</ul></li>
</ul><ul><li>Spring for GraphQL
	<ul><li>Multiple versions</li>
	</ul></li>
</ul><ul><li>Spring Integration
	<ul><li>Multiple versions</li>
	</ul></li>
</ul><ul><li>Spring Authorization Server
	<ul><li>Prior to or equal to 1.5.8</li>
		<li>Prior to or equal to 1.4.11</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://spring.io/security/">Spring | Security Advisories</a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/control-systems-cisa-security-advisory-av26-841</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/control-systems-cisa-security-advisory-av26-841"/><title><![CDATA[[Control Systems] CISA ICS security advisory (AV26-841)]]></title><updated>2026-08-21T19:41:02Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8139" about="/en/alerts-advisories/control-systems-cisa-security-advisory-av26-841" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-841<br /><strong>Date: </strong>August 21, 2026</p>

<p>As of August 18, 2026, Malcolm is affected by vulnerabilities in the following product:</p>

<ul><li>Malcolm
	<ul><li>Prior to 26.06.1 (CVE-2026-55676)</li>
		<li>Prior to 26.07.0 (CVE-2026-63133, CVE-2026-63134, CVE-2026-63177)</li>
		<li>Prior to or equal to 26.07.1 (CVE-2026-19670, CVE-2026-19671)</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.cisa.gov/news-events/ics-advisories/icsa-26-230-01">CISA Malcolm | CISA</a></li>
	<li><a href="https://www.cisa.gov/news-events/ics-advisories">ICS Advisories | CISA</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/zimbra-security-advisory-av26-816</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/zimbra-security-advisory-av26-816"/><title><![CDATA[Zimbra security advisory (AV26-816) – Update 1]]></title><updated>2026-08-21T19:11:47Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8114" about="/en/alerts-advisories/zimbra-security-advisory-av26-816" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-816<br /><strong>Date: </strong>August 14, 2026<br /><strong>Updated:</strong> August 21, 2026</p>

<p>As of August 13, 2026, Zimbra is affected by vulnerabilities in the following product:</p>

<ul><li>Collaboration - Prior to 10.1.20</li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<h2 class="h3 mrgn-tp-lg">Update 1</h2>

<p>On August 21, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-73570 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<ul class="list-unstyled mrgn-tp-lg"><li><a href="https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories">Zimbra Security Advisories - Zimbra: Tech Center</a></li>
	<li><a href="https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy">Zimbra Responsible Disclosure Policy - Zimbra: Tech Center</a></li>
	<li><a href="https://blog.zimbra.com/">Zimbra: Blog - All Things Zimbra</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-73570">CISA KEV: CVE-2026-73570</a>  </li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/mozilla-security-advisory-av26-840</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/mozilla-security-advisory-av26-840"/><title><![CDATA[Mozilla security advisory (AV26-840)]]></title><updated>2026-08-21T14:52:28Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8138" about="/en/alerts-advisories/mozilla-security-advisory-av26-840" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-840<br /><strong>Date: </strong>August 21, 2026</p>

<p>As of August 18, 2026, Mozilla is affected by vulnerabilities in the following products:</p>

<ul><li>Firefox
	<ul><li>versions prior to 154</li>
	</ul></li>
	<li>Firefox ESR
	<ul><li>versions prior to 115.39</li>
		<li>versions prior to 140.14</li>
		<li>versions prior to 153.1</li>
	</ul></li>
	<li>Thunderbird
	<ul><li>versions prior to 140.14</li>
		<li>versions prior to 153.1</li>
		<li>versions prior to 154</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.mozilla.org/en-US/security/advisories/">Mozilla Foundation Security Advisories — Mozilla </a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/apple-security-advisory-av26-839</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/apple-security-advisory-av26-839"/><title><![CDATA[Apple security advisory (AV26-839)]]></title><updated>2026-08-21T13:32:22Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8137" about="/en/alerts-advisories/apple-security-advisory-av26-839" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-839<br /><strong>Date: </strong>August 21, 2026</p>

<p>As of August 18, 2026, Apple is affected by vulnerabilities in the following products:</p>

<ul><li>Safari
	<ul><li>Prior to 26.6.1</li>
	</ul></li>
	<li>iOS and iPadOS
	<ul><li>Prior to 18.7.10</li>
		<li>Prior to 26.6.1</li>
	</ul></li>
	<li>MacOS Tahoe
	<ul><li>Prior to 26.6.2</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://support.apple.com/en-us/100100">Apple security releases - Apple Support </a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry></feed>