<?xml version="1.0" encoding="UTF-8"?><feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en"><id>https://cyber.gc.ca/api/cccs/atom/v1/get?feed=alerts_advisories&amp;lang=en</id><link rel="self" href="https://cyber.gc.ca/api/cccs/atom/v1/get?feed=alerts_advisories&amp;lang=en"/><title>Alerts and advisories</title><updated>2026-08-10T18:06:03Z</updated><entry><id>https://cyber.gc.ca/en/alerts-advisories/qualcomm-security-advisory-av26-795</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/qualcomm-security-advisory-av26-795"/><title><![CDATA[Qualcomm security advisory (AV26-795)]]></title><updated>2026-08-10T18:06:03Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8090" about="/en/alerts-advisories/qualcomm-security-advisory-av26-795" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-795<br /><strong>Date:</strong> August 10, 2026</p>

<p>As of August 3, 2026, Qualcomm published a security bulletin to address vulnerabilities affecting Qualcomm products.</p>

<p>The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.</p>

<ul class="list-unstyled"><li><a href="https://docs.qualcomm.com/securitybulletin/august-2026-bulletin.html">August 2026 Security Bulletin</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-794</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-794"/><title><![CDATA[Cisco security advisory (AV26-794)]]></title><updated>2026-08-10T16:02:17Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8089" about="/en/alerts-advisories/cisco-security-advisory-av26-794" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-794<br /><strong>Date:</strong> August 10, 2026</p>

<p>As of August 7, 2026, Cisco is affected by vulnerabilities in the following product:</p>

<ul><li>Secure Endpoint Connector for Linux</li>
	<li>Secure Endpoint Connector for Mac</li>
	<li>Secure Endpoint Connector for Windows</li>
	<li>Cisco Secure Endpoint Private Cloud
	<ul><li>Prior to 8.4.5.30483</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26">ClamAV Vulnerabilities Affecting Cisco Products: August 2026</a></li>
	<li><a href="https://sec.cloudapps.cisco.com/security/center/publicationListing.x">Cisco Security Advisories</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/roundcube-security-advisory-av26-793</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/roundcube-security-advisory-av26-793"/><title><![CDATA[Roundcube security advisory (AV26-793)]]></title><updated>2026-08-10T15:15:08Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8088" about="/en/alerts-advisories/roundcube-security-advisory-av26-793" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number:</strong> AV26-793<br /><strong>Date:</strong> August 10, 2026</p>

<p>On August 9, 2026, Roundcube is affected by vulnerabilities in the following product:</p>

<ul><li>Roundcube Webmail
	<ul><li>prior to 1.6.18</li>
		<li>prior to 1.7.3</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.</p>

<ul class="list-unstyled"><li><a href="https://roundcube.net/news/2026/08/09/security-updates-1.6.18-and-1.7.3">Security updates 1.6.18 and 1.7.3 released</a></li>
	<li><a href="https://github.com/roundcube/roundcubemail/releases/tag/1.6.18">Roundcube Webmail 1.6.18</a></li>
	<li><a href="https://github.com/roundcube/roundcubemail/releases/tag/1.7.3">Roundcube Webmail 1.7.3</a></li>
	<li><a href="https://roundcube.net/">Roundcube Open Source Webmail Software</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/wordpress-security-advisory-av26-792</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/wordpress-security-advisory-av26-792"/><title><![CDATA[WordPress security advisory (AV26-792)]]></title><updated>2026-08-10T14:14:38Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8087" about="/en/alerts-advisories/wordpress-security-advisory-av26-792" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-792<br /><strong>Date:</strong> August 10, 2026</p>

<p>As of August 7, 2026, WordPress is affected by a vulnerability in the following product:</p>

<ul><li>WordPress
	<ul><li>prior to 7.0.3</li>
	</ul></li>
</ul><p>Open-source reporting indicates that CVE-2026-64638 is being exploited in the wild.</p>

<p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://wordpress.org/news/2026/08/wordpress-7-0-3-release/">WordPress 7.0.3 release – WordPress News</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/hashicorp-security-advisory-av26-791</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/hashicorp-security-advisory-av26-791"/><title><![CDATA[HashiCorp security advisory (AV26-791)]]></title><updated>2026-08-10T14:09:21Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8086" about="/en/alerts-advisories/hashicorp-security-advisory-av26-791" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-791<br /><strong>Date:</strong> August 10, 2026</p>

<p>As of August 7, 2026, HashiCorp is affected by vulnerabilities in the following products:</p>

<ul><li>Consul Community Edition
	<ul><li>Prior to 2.0.3</li>
	</ul></li>
	<li>Consul Enterprise
	<ul><li>Prior to 2.0.3</li>
		<li>Prior to 1.22.11</li>
		<li>Prior to 1.21.17</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://discuss.hashicorp.com/t/hcsec-2026-25-multiple-vulnerabilities-impacting-hashicorp-consul/77629">HCSEC-2026-25 - Multiple vulnerabilities impacting HashiCorp Consul - Security - HashiCorp Discuss</a></li>
	<li><a href="https://discuss.hashicorp.com/c/security/52">Security - HashiCorp Discuss</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-790</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-790"/><title><![CDATA[WebPros security advisory (AV26-790)]]></title><updated>2026-08-10T14:04:20Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8085" about="/en/alerts-advisories/webpros-security-advisory-av26-790" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-790<br /><strong>Date:</strong> August 10, 2026</p>

<p>As of August 7, 2026, WebPros is affected by a vulnerability in the following product:</p>

<ul><li>Plesk Obsidian
	<ul><li>Prior to 18.0.80.1 and 18.0.79.5</li>
	</ul></li>
</ul><ul class="list-unstyled"><li><a href="https://support.plesk.com/hc/en-us/articles/42431868205079-CVE-2026-64636-Vulnerability-in-Plesk-blind-SQL-injection">CVE-2026-64636 Vulnerability in Plesk: blind SQL injection</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/ibm-security-advisory-av26-789</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/ibm-security-advisory-av26-789"/><title><![CDATA[IBM security advisory (AV26-789)]]></title><updated>2026-08-10T13:56:51Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8084" about="/en/alerts-advisories/ibm-security-advisory-av26-789" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-789<br /><strong>Date:</strong> August 10, 2026</p>

<p>As of August 7, 2026, IBM is affected by vulnerabilities in the following products:</p>

<ul><li>Application Gateway Operator
	<ul><li>Prior to or equal to 26.06</li>
	</ul></li>
	<li>Big SQL on IBM Cloud Pak for Data
	<ul><li>Version Big SQL 7.7 on Cloud Pak for Data 5.0</li>
	</ul></li>
	<li>Big SQL on IBM Software Hub
	<ul><li>Multiple versions</li>
	</ul></li>
	<li>Business Automation Workflow containers and traditional
	<ul><li>26.0.0</li>
		<li>Prior to or equal to 24.0.0 Interim Fix 009</li>
		<li>Prior to or equal to 24.0.1 Interim Fix 007</li>
		<li>Prior to or equal to 25.0.0 Interim Fix 005</li>
	</ul></li>
	<li>Cloud APM, Advanced/Base Private
	<ul><li>Prior to or equal to 8.1.4</li>
	</ul></li>
	<li>Cloud Pak For Business Automation
	<ul><li>24.0.0</li>
		<li>24.0.1</li>
		<li>25.0.0</li>
		<li>26.0.0</li>
	</ul></li>
	<li>IBM Event Streams version
	<ul><li>13.0.1</li>
	</ul></li>
	<li>Langflow OSS
	<ul><li>Prior to or equal to 1.10.3</li>
	</ul></li>
	<li>Maximo Application Suite
	<ul><li>9.0</li>
		<li>9.1</li>
		<li>9.2</li>
	</ul></li>
	<li>IBM Netezza Appliance
	<ul><li>1.0.2.0</li>
	</ul></li>
	<li>Operational Decision Manager
	<ul><li>Multiple versions</li>
	</ul></li>
	<li>PowerVC
	<ul><li>Multiple versions</li>
	</ul></li>
	<li>Process Automation Manager Open Edition Starter Kit for Banking
	<ul><li>Prior to or equal to 9.4.1</li>
	</ul></li>
	<li>SevOne Network Performance Management (Data Insight)
	<ul><li>Prior to or equal to 8.2.2</li>
	</ul></li>
	<li>QRadar
	<ul><li>Prior to or equal to 7.5.0 UP 15 Interim Fix 005</li>
		<li>Prior to or equal to 7.6.0.1</li>
	</ul></li>
	<li>Security Verify Information Queue
	<ul><li>Multiple versions</li>
	</ul></li>
	<li>Storage Protect Operations Center
	<ul><li>Versions prior or equal to 8.1 and 8.2</li>
	</ul></li>
	<li>webMethods Managed File Transfer (on-prem)
	<ul><li>Prior to or equal to 11.1 and 12.1</li>
	</ul></li>
	<li>WebSphere Application Server
	<ul><li>8.5</li>
		<li>9.0</li>
	</ul></li>
	<li>WebSphere Application Server - Liberty
	<ul><li>Continuous delivery</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.</p>

<ul class="list-unstyled"><li><a href="https://www.ibm.com/support/pages/bulletin/">IBM Product Security Incident Response</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/dell-security-advisory-av26-788</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/dell-security-advisory-av26-788"/><title><![CDATA[Dell security advisory (AV26-788)]]></title><updated>2026-08-10T12:38:31Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8083" about="/en/alerts-advisories/dell-security-advisory-av26-788" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-788<br /><strong>Date:</strong> August 10, 2026</p>

<p>As of August 7, 2026, Dell is affected by vulnerabilities in the following products:</p>

<ul><li>Dell OpenManage Server Administrator Managed Node (Patch) for Windows
	<ul><li>Prior to 11.1.0.2</li>
	</ul></li>
	<li>Dell OpenManage Server Administrator Managed Node for RHEL 8.10
	<ul><li>Prior to 11.1.0.2</li>
	</ul></li>
	<li>Dell OpenManage Server Administrator Managed Node for RHEL 9.4
	<ul><li>Prior to 11.1.0.2</li>
	</ul></li>
	<li>Dell OpenManage Server Administrator Managed Node for SLES 15
	<ul><li>Prior to 11.1.0.2</li>
	</ul></li>
	<li>OpenManage Server Administrator Managed Node (Patch) for Windows
	<ul><li>Prior to 11.1.0.2</li>
	</ul></li>
	<li>RVTools
	<ul><li>Prior to 4.8.1</li>
	</ul></li>
	<li>Virtual Storage Integrator for VMware vSphere Client
	<ul><li>Prior to 10.11.1.0</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.dell.com/support/kbdoc/en-ca/000496035/dsa-2026-335-security-update-for-dell-virtual-storage-integrator-for-vmware-vsphere-client-multiple-vulnerabilities?lwp=rt">DSA-2026-335: Security Update for Dell Virtual Storage Integrator for VMware vSphere Client Multiple Vulnerabilities</a></li>
	<li><a href="https://www.dell.com/support/kbdoc/en-ca/000494958/dsa-2026-326-security-update-for-dell-openmanage-server-administrator-omsa-network-access-vulnerabilities?lwp=rt">DSA-2026-326: Security Update for Dell OpenManage Server Administrator (OMSA) Network Access Vulnerabilities</a></li>
	<li><a href="https://www.dell.com/support/kbdoc/en-ca/000494748/dsa-2026-325-security-update-for-dell-rvtools-vulnerability">DSA-2026-325: Security Update for Dell RVtools Vulnerability</a></li>
	<li><a href="https://www.dell.com/support/security/en-ca?lwp=rt">Security Advisories, Notices and Resources | Dell Canada</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-552</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-552"/><title><![CDATA[Progress security advisory (AV26-552) – Update 2]]></title><updated>2026-08-07T17:12:30Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="7791" about="/en/alerts-advisories/progress-security-advisory-av26-552" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-552<br /><strong>Date: </strong>June 5, 2026<br /><strong>Updated: </strong> Auguest 7, 2026</p>

<p>Between June 2 and 4, 2026, Progress published security advisories to address vulnerabilities in the following products. Included was a critical update for the following:</p>

<ul><li>Sitefinity CMS and Sitefinity Insight – multiple versions</li>
	<li>Progress Kemp LoadMaster – version GA v7.2.63.1 and prior</li>
	<li>Progress Kemp LoadMaster - version LTSF v7.2.54.17 and prior</li>
</ul><h2 class="h3">Update 1</h2>

<p>Open-source reporting indicates that CVE-2026-8037 is being exploited in the wild.</p>

<h2 class="h3">Update 2</h2>

<p>On August 7, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-8037 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.</p>

<ul class="list-unstyled"><li><a href="https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2026-7312-CVE-2026-7198-CVE-2026-7195-CVE-2026-7201-CVE-2026-7313-May-2026">Sitefinity Security Advisory for Addressing Security Vulnerabilities CVE-2026-7312, CVE-2026-7198, CVE-2026-7195, CVE-2026-7201, CVE-2026-7313, May 2026</a></li>
	<li><a href="https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691">LoadMaster Critical Security Bulletin – June 2026 – (CVE-2026-8037, CVE-2026-33691)</a></li>
	<li><a href="https://www.progress.com/trust-center">Progress Trust Center</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-8037">CISA KEV: CVE-2026-8037</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-787</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-787"/><title><![CDATA[Google security advisory (AV26-787)]]></title><updated>2026-08-07T15:02:30Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8081" about="/en/alerts-advisories/google-security-advisory-av26-787" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-787<br /><strong>Date: </strong>August 7, 2026</p>

<p>As of August 6, 2026, Google is affected by vulnerabilities in the following product:</p>

<ul><li>Chrome
	<ul><li>versions prior to 151.0.7922.109</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01193673229.html">Google Chrome Security Advisory</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/n-able-security-advisory-av26-769</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/n-able-security-advisory-av26-769"/><title><![CDATA[N-able security advisory (AV26-769) - Update 2]]></title><updated>2026-08-07T14:37:42Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8063" about="/en/alerts-advisories/n-able-security-advisory-av26-769" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-769<br /><strong>Date: </strong>August 4, 2026<br /><strong>Updated: </strong>August 7, 2026</p>

<p>As of August 2, 2026, N-able is affected by vulnerabilities in the following product:</p>

<ul><li>N-central
	<ul><li>Prior to 2026.3.1.10</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<p>On August 3, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-18577 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<h2 class="h3">Update 1</h2>

<p>On August 4, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-18556 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<h2 class="h3">Update 2</h2>

<p>On August 6, 2026, N-able released Hotfix 2 to further mitigate these vulnerabilities.</p>

<ul class="list-unstyled"><li><a href="https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF1_Release_Notes.htm">2026.3 HF1 Release Notes</a></li>
	<li><a href="https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/">N-central 2026.3 Hotfix 1 – Mitigation for CVE-2026-18577 | N-able Status</a></li>
	<li><a href="https://status.n-able.com/2026/08/06/n-central-2026-3-hotfix-2-additional-mitigation-for-cve-2026-18577/">N-central 2026.3 Hotfix 2&amp;nsp;– Additional Mitigation for CVE-2026-18577</a></li>
	<li><a href="https://status.n-able.com/release-notes/">Release Notes | N-able Status</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-18577">CISA KEV:CVE-2026-18577</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-18556">CISA KEV: CVE-2026-18556</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/django-security-advisory-av26-786</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/django-security-advisory-av26-786"/><title><![CDATA[Django security advisory (AV26-786)]]></title><updated>2026-08-06T15:39:19Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8080" about="/en/alerts-advisories/django-security-advisory-av26-786" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-786<br /><strong>Date: </strong>August 6, 2026</p>

<p>As of August 4, 2026, Django is affected by vulnerabilities in the following product:</p>

<ul><li>Django
	<ul><li>before 6.0.8</li>
		<li>before 5.2.17</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.djangoproject.com/weblog/2026/aug/04/security-releases/">Django security releases issued: 6.0.8 and 5.2.17</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-785</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-785"/><title><![CDATA[Cisco security advisory (AV26-785)]]></title><updated>2026-08-06T14:00:41Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8079" about="/en/alerts-advisories/cisco-security-advisory-av26-785" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-785<br /><strong>Date: </strong>August 6, 2026</p>

<p>As of August 5, 2026, Cisco is affected by vulnerabilities in the following products:</p>

<ul><li>Cisco Catalyst SD-WAN Release
	<ul><li>prior to 20.9.10</li>
		<li>prior to 20.12.8.1</li>
		<li>prior to 20.15.6</li>
		<li>prior to 20.18.4</li>
		<li>prior to 26.1.2</li>
	</ul></li>
	<li>Cisco IOS XE Software Release
	<ul><li>prior to 17.9.10</li>
		<li>prior to 17.12.8</li>
		<li>prior to 17.15.6</li>
		<li>prior to 17.18.4 and 17.18.4a</li>
		<li>prior to 26.1.2</li>
	</ul></li>
	<li>Cisco Secure FMC Software Release
	<ul><li>prior to Cisco_Firepower_Mgmt_Center_Hotfix_GB-7.0.9.1-3.sh.REL.tar</li>
		<li>prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_HL-7.2.11.1-4.sh.REL.tar</li>
		<li>prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_HG-7.4.7.1-3.sh.REL.tar</li>
		<li>prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_CY-7.6.5.1-2.sh.REL.tar</li>
		<li>prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_AM-7.7.12.1-2.sh.REL.tar</li>
		<li>prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_P-10.0.1.1-2.sh.REL.tar</li>
	</ul></li>
	<li>Cisco IOS XE Software with SNMPv1</li>
	<li>Cisco IOS XE Software with SNMPv2c</li>
	<li>Cisco IOS XE Software with SNMPv3</li>
	<li>Cisco IOS XE Software with BEEP feature enabled</li>
	<li>Cisco IOS Software or IOS XE Software with XMCP Server feature enabled</li>
	<li>Cisco NFVIS Release
	<ul><li>prior to 4.12</li>
		<li>prior to 4.13</li>
		<li>prior to 4.14</li>
		<li>prior to 4.15</li>
	</ul></li>
	<li>Cisco UCS Server Software Release
	<ul><li>prior to 4.2</li>
		<li>prior to 4.3</li>
		<li>prior to 6.0</li>
		<li>prior to 3.2</li>
		<li>prior to 4.15</li>
		<li>prior to 4.3</li>
	</ul></li>
	<li>Cisco Telemetry Broker Appliances
	<ul><li>prior to 6.0(2.260143)</li>
	</ul></li>
	<li>IEC6400 Edge Compute Appliances
	<ul><li>prior to 4.3(6.260054)</li>
	</ul></li>
	<li>IOS XRv 9000 M7 Appliances
	<ul><li>prior to 6.0(2.260143)</li>
	</ul></li>
	<li>Secure Endpoint Private Cloud Appliances
	<ul><li>prior to 4.3(2.260020) (M5)</li>
		<li>prior to 4.3(6.260054) (M6)</li>
	</ul></li>
	<li>Secure Firewall Management (FMC) Center Appliances
	<ul><li>prior to 4.3(2.260020) (M5)</li>
		<li>prior to 6.0(2.260143) (M6, M8)</li>
	</ul></li>
	<li>Secure Malware Analytics Appliances
	<ul><li>prior to 4.3(2.260020) (M5)</li>
		<li>prior to 4.3(6.260054) (M6)</li>
	</ul></li>
	<li>Secure Network Analytics Appliances
	<ul><li>prior to 4.3(2.260020) (M5)</li>
		<li>prior to 6.0(2.260143) (M6)</li>
	</ul></li>
	<li>Secure Network Server (ISE SNS) Appliances
	<ul><li>prior to 4.3(2.260020) (M5)</li>
		<li>prior to 6.0(2.260143) (M6, M8)</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K">Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026</a></li>
	<li><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxe-V8NMuMZJ">Cisco IOS XE Software Security Hardening Release: August 2026</a></li>
	<li><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2">Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability</a></li>
	<li><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-snmp-dos-ZAqNm4MD">Cisco IOS XE Software SNMP Denial of Service Vulnerability</a></li>
	<li><a href="https://sec.cloudapps.cisco.com/security/center/publicationListing.x">Cisco Security Advisories</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/foxit-security-advisory-av26-784</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/foxit-security-advisory-av26-784"/><title><![CDATA[Foxit security advisory (AV26-784)]]></title><updated>2026-08-06T13:29:24Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8078" about="/en/alerts-advisories/foxit-security-advisory-av26-784" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-784<br /><strong>Date: </strong>August 6, 2026</p>

<p>As of August 6, 2026, Foxit is affected by a vulnerability in the following product:</p>

<ul><li>Foxit PDF Services API
	<ul><li>before 2026-07-27</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.</p>

<ul class="list-unstyled"><li><a href="https://www.foxit.com/support/security-bulletins.html">Security Bulletins | Foxit</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/github-security-advisory-av26-783</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/github-security-advisory-av26-783"/><title><![CDATA[GitHub security advisory (AV26-783)]]></title><updated>2026-08-06T12:47:42Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8077" about="/en/alerts-advisories/github-security-advisory-av26-783" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-783<br /><strong>Date: </strong>August 6, 2026</p>

<p>As of August 5, 2026, GitHub is affected by vulnerabilities in the following product:</p>

<ul><li>Enterprise Server
	<ul><li>3.17.0 Prior to 3.17.16</li>
		<li>3.17.0 Prior to 3.17.19</li>
		<li>3.18.0 Prior to 3.18.10</li>
		<li>3.18.0 Prior to 3.18.13</li>
		<li>3.19.0 Prior to 3.19.10</li>
		<li>3.19.0 Prior to 3.19.7</li>
		<li>3.20.0 Prior to 3.20.3</li>
		<li>3.20.0 Prior to 3.20.6</li>
		<li>3.21.0 Prior to 3.21.4</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://docs.github.com/en/enterprise-server@3.17/admin/release-notes">Release notes - GitHub Enterprise Server 3.17 Docs</a></li>
	<li><a href="https://docs.github.com/en/enterprise-server@3.18/admin/release-notes">Release notes - GitHub Enterprise Server 3.18 Docs</a></li>
	<li><a href="https://docs.github.com/en/enterprise-server@3.19/admin/release-notes">Release notes - GitHub Enterprise Server 3.19 Docs</a></li>
	<li><a href="https://docs.github.com/en/enterprise-server@3.20/admin/release-notes">Release notes - GitHub Enterprise Server 3.20 Docs</a></li>
	<li><a href="https://docs.github.com/en/enterprise-server@3.21/admin/release-notes">Release notes - GitHub Enterprise Server 3.21 Docs</a></li>
	<li><a href="https://docs.github.com/en/enterprise-server@3.19/admin/all-releases">GitHub Enterprise Server releases - GitHub Enterprise Server 3.19 Docs</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/jenkins-security-advisory-av26-782</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/jenkins-security-advisory-av26-782"/><title><![CDATA[Jenkins security advisory (AV26-782)]]></title><updated>2026-08-06T12:39:37Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8076" about="/en/alerts-advisories/jenkins-security-advisory-av26-782" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-782<br /><strong>Date: </strong>August 6, 2026</p>

<p>As of August 5, 2026, Jenkins Project is affected by vulnerabilities in the following products:</p>

<ul><li>Jenkins
	<ul><li>ALL except 2.568.2</li>
		<li>ALL except 2.576</li>
	</ul></li>
	<li>Jenkins AWS CodeBuild Plugin
	<ul><li>Prior to or equal to 0.59</li>
	</ul></li>
	<li>Jenkins CodeSonar Plugin
	<ul><li>Prior to or equal to 3.6.0</li>
	</ul></li>
	<li>Jenkins Google Chat Notification Plugin
	<ul><li>Prior to or equal to 166.ve6b_de280f2e8</li>
	</ul></li>
	<li>Jenkins Horreum Plugin
	<ul><li>Prior to or equal to 0.16.162.v33b_4a_a_b_5f828</li>
	</ul></li>
	<li>Jenkins Ivy Report Plugin
	<ul><li>Prior to or equal to 1.2</li>
	</ul></li>
	<li>Jenkins Multijob Plugin
	<ul><li>Prior to or equal to 669.v9d96a_d9c71b_0</li>
	</ul></li>
	<li>Jenkins Violation Comments to GitLab Plugin
	<ul><li>Prior to or equal to 2.62.0</li>
	</ul></li>
	<li>Jenkins XML Job to Job DSL Plugin
	<ul><li>Prior to or equal to 0.1.13</li>
	</ul></li>
	<li>Remoting
	<ul><li>ALL except 3355.3357.v931d3c992987</li>
		<li>ALL except 3385.vf1123fb_515da_</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.jenkins.io/security/advisory/2026-08-05/">Jenkins Security Advisory 2026-08-05 </a></li>
	<li><a href="https://www.jenkins.io/security/advisories/">Security Advisories</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-781"/><title><![CDATA[Progress security advisory (AV26-781)]]></title><updated>2026-08-06T12:16:24Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8075" about="/en/alerts-advisories/progress-security-advisory-av26-781" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-781<br /><strong>Date: </strong>August 5, 2026</p>

<p>As of August 5, 2026, Progress Software Corporation is affected by vulnerabilities in the following product:</p>

<ul><li>MarkLogic Server
	<ul><li>Prior to 11.3.6</li>
		<li>Prior to 12.0.3</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026">Marklogic Critical Security Alert Bulletin – August 2026 – (CVE-2026-7326, CVE-2026-7327, CVE-2026-7329, CVE-2026-7557, CVE-2026-8709, CVE-2026-9190, CVE-2026-9192, CVE-2026-9193, CVE-2026-9195, CVE-2026-9203)</a></li>
	<li><a href="https://www.progress.com/trust-center ">Progress Trust Center</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/zyxel-security-advisory-av26-780</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/zyxel-security-advisory-av26-780"/><title><![CDATA[Zyxel security advisory (AV26-780)]]></title><updated>2026-08-06T11:58:54Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8074" about="/en/alerts-advisories/zyxel-security-advisory-av26-780" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-780<br /><strong>Date: </strong>August 5, 2026</p>

<p>As of August 4, 2026, Zyxel is affected by vulnerabilities in the following products:</p>

<ul><li>ATP series firmware
	<ul><li>from V4.32 through V5.42 Patch 1</li>
	</ul></li>
	<li>USG FLEX 50(W) series firmware
	<ul><li>from V4.16 through V5.42 Patch 1</li>
	</ul></li>
	<li>USG FLEX series firmware
	<ul><li>from V4.50 through V5.42 Patch 1</li>
	</ul></li>
	<li>USG20(W)-VPN series firmware
	<ul><li>from V4.16 through V5.42 Patch 1</li>
	</ul></li>
	<li>WAX650S firmware
	<ul><li>Prior to or equal to 7.10(ABRM.4)C0</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-path-traversal-vulnerability-in-the-configuration-file-execution-cli-command-of-zld-firewalls-08-04-2026 ">Zyxel security advisory for path traversal vulnerability in the configuration file execution CLI command of ZLD firewalls</a></li>
	<li><a href="https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-improper-authentication-vulnerabilities-in-certain-aps-fwa7-and-security-routers-08-04-2026">Zyxel security advisory for command injection and improper authentication vulnerabilities in certain APs, FWA7, and Security Routers | Zyxel Networks</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/jetbrains-security-advisory-av26-752</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/jetbrains-security-advisory-av26-752"/><title><![CDATA[JetBrains security advisory (AV26-752) – Update 1]]></title><updated>2026-08-05T18:44:01Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8043" about="/en/alerts-advisories/jetbrains-security-advisory-av26-752" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-752<br /><strong>Date:</strong> July 28, 2026<br /><strong>Updated:</strong> August 5, 2026</p>

<p>As of July 27, 2026, JetBrains is affected by a vulnerability in the following product:</p>

<ul><li>TeamCity
	<ul><li>Prior to 2026.1.3, 2025.11.7</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<h2 class="h3">Update 1</h2>

<p>On August 5, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-63077 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<ul class="list-unstyled"><li><a href="https://www.jetbrains.com/privacy-security/issues-fixed/">Fixed security issues</a></li>
	<li><a href="https://blog.jetbrains.com/security/">Security - The JetBrains Blog</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-63077">CISA KEV: CVE-2026-63077</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/zbtlink-security-advisory-av26-779</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/zbtlink-security-advisory-av26-779"/><title><![CDATA[Zbtlink security advisory (AV26-779)]]></title><updated>2026-08-05T17:55:38Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8073" about="/en/alerts-advisories/zbtlink-security-advisory-av26-779" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-779<br /><strong>Date: </strong>August 5, 2026</p>

<p>As of August 5, 2026, Zbtlink is affected by a vulnerability in the following products:</p>

<ul><li>CPE2801 Firmware
	<ul><li>22.10.09</li>
	</ul></li>
	<li>WE1026-5G-WD Firmware
	<ul><li>21.04.07</li>
	</ul></li>
	<li>WE1326 Firmware
	<ul><li>22.02.18_1</li>
	</ul></li>
	<li>WE2007 Firmware
	<ul><li>23.08.12</li>
	</ul></li>
	<li>WE2008-DSIM Firmware
	<ul><li>23.08.11</li>
	</ul></li>
	<li>WE2416 Firmware
	<ul><li>21.03.22_1</li>
	</ul></li>
	<li>WE3326 Firmware
	<ul><li>20.09.30</li>
	</ul></li>
	<li>WE5927 Firmware
	<ul><li>22.08.10</li>
	</ul></li>
	<li>WE5931 Firmware
	<ul><li>22.05.31</li>
	</ul></li>
	<li>WE5931AC Firmware
	<ul><li>22.05.31</li>
	</ul></li>
	<li>WE826-T3-DSIM Firmware
	<ul><li>21.12.21</li>
	</ul></li>
	<li>WG108 Firmware
	<ul><li>21.08.06_1</li>
	</ul></li>
	<li>WG1602 Firmware
	<ul><li>23.10.11</li>
	</ul></li>
	<li>WG1608-DSIM Firmware
	<ul><li>23.03.16</li>
	</ul></li>
	<li>WG209 Firmware
	<ul><li>21.07.28</li>
	</ul></li>
	<li>WG2105 Firmware
	<ul><li>22.05.30</li>
	</ul></li>
	<li>WG2107 Firmware
	<ul><li>22.09.08</li>
	</ul></li>
	<li>WG259 Firmware
	<ul><li>21.03.23</li>
	</ul></li>
	<li>WG3526 Firmware
	<ul><li>22.11.01</li>
	</ul></li>
	<li>ZBT-Z8102AX-2SIM Firmware
	<ul><li>7.6.7.2-25.0814_114432</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://github.com/ycsunjane/rctl">GitHub - ycsunjane/rctl: remote linux control | GitHub</a></li>
	<li><a href="https://www.vulncheck.com/advisories/zbt-endlessdoors">ENDLESSDOORS: Zbtlink Router rctl/kworker Phone-Home Root Implant | Advisories | VulnCheck</a></li>
	<li><a href="https://www.zbtlink.com/pages/zbt-router-firmware-download">Zbtlink - Firmware Download</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/hewlett-packard-enterprise-hpe-security-advisory-av26-778</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/hewlett-packard-enterprise-hpe-security-advisory-av26-778"/><title><![CDATA[Hewlett Packard Enterprise (HPE) security advisory (AV26-778)]]></title><updated>2026-08-05T12:53:05Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8072" about="/en/alerts-advisories/hewlett-packard-enterprise-hpe-security-advisory-av26-778" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-778<br /><strong>Date: </strong>August 5, 2026</p>

<p>As of August 4, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following product:</p>

<ul><li>EdgeConnect SD-WAN Orchestrator
	<ul><li>Prior to or equal to 9.6.2.40208</li>
		<li>Prior to or equal to 9.6.3.40137</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05100en_us&amp;docLocale=en_US#hpesbnw05100-rev-1-multiple-vulnerabilities-in-hpe-0">HPESBNW05100 rev.1 - Multiple Vulnerabilities in HPE Networking EdgeConnect Orchestrator 9.6 branch</a></li>
	<li><a href="https://support.hpe.com/connect/s/securitybulletinlibrary?language=en_US">HPE Security Bulletin Library</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/veeam-security-advisory-av26-777</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/veeam-security-advisory-av26-777"/><title><![CDATA[Veeam security advisory (AV26-777)]]></title><updated>2026-08-04T20:03:24Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8071" about="/en/alerts-advisories/veeam-security-advisory-av26-777" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-777<br /><strong>Date:</strong> August 4, 2026</p>

<p>As of August 4, 2026, Veeam is affected by vulnerabilities in the following products:</p>

<ul><li>ONE
	<ul><li>Prior to or equal to 13.1.0.7034</li>
	</ul></li>
	<li>Service Provider Console
	<ul><li>Prior to 9.3.0.35057</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.veeam.com/kb4893">KB4893: Vulnerabilities Resolved in Veeam Service Provider Console 9.3</a></li>
	<li><a href="https://www.veeam.com/kb4892">KB4892: Vulnerabilities Resolved in Veeam ONE 13.1</a></li>
	<li><a href="https://www.veeam.com/knowledge-base.html?type=security">Veeam Support Knowledge Base</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-776</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-776"/><title><![CDATA[Adobe security advisory (AV26-776)]]></title><updated>2026-08-04T19:46:09Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8070" about="/en/alerts-advisories/adobe-security-advisory-av26-776" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-776<br /><strong>Date:</strong> August 4, 2026</p>

<p>As of August 3, 2026, Adobe is affected by vulnerabilities in the following products:</p>

<ul><li>Adobe Campaign Classic
	<ul><li>ACC v7: 7.4.3 build 9398 and prior</li>
	</ul></li>
	<li>Adobe Premiere
	<ul><li>26.2.2 and prior</li>
	</ul></li>
	<li>Adobe Premiere Pro
	<ul><li>25.6.5 and prior</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://helpx.adobe.com/security/products/campaign/apsb26-120.html">Security update available for Adobe Campaign Classic | APSB26-120</a></li>
	<li><a href="https://helpx.adobe.com/security/products/premiere_pro/apsb26-76.html">Security Updates Available for Adobe Premiere Pro | APSB26-76</a></li>
	<li><a href="https://helpx.adobe.com/security/Home.html">Adobe Product Security Incident Response Team</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/misp-security-advisory-av26-775</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/misp-security-advisory-av26-775"/><title><![CDATA[MISP security advisory (AV26-775)]]></title><updated>2026-08-04T17:31:23Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8069" about="/en/alerts-advisories/misp-security-advisory-av26-775" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-775<br /><strong>Date: </strong>August 4, 2026</p>

<p>As of August 3, 2026, Malware Information Sharing Platform (MISP) is affected by vulnerabilities in the following product:</p>

<ul><li>cti-transmute
	<ul><li>Prior to or equal to 1.4.0</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://github.com/MISP/cti-transmute/commit/20f35307bcb706c8dd8ca3884a88fb36b05b5244">fix: [website] Block file and network fetches in the evaluation PDF r… · MISP/cti-transmute@20f3530 · GitHub</a></li>
	<li><a href="https://github.com/MISP/cti-transmute/commit/321892d26b82c8a5af1e210ee30735abb109fac2">fix: [website] Cap the activity-timeline day range · MISP/cti-transmute@321892d · GitHub</a></li>
	<li><a href="https://github.com/MISP/cti-transmute/commit/4f0d051ec5f1d45894c26987d409411728b2d82c">fix: [website] Require POST to delete a user · MISP/cti-transmute@4f0d051 · GitHub</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/checkpoint-security-advisory-av26-774</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/checkpoint-security-advisory-av26-774"/><title><![CDATA[Checkpoint security advisory (AV26-774)]]></title><updated>2026-08-04T15:44:42Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8068" about="/en/alerts-advisories/checkpoint-security-advisory-av26-774" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-774<br /><strong>Date: </strong>August 3, 2026</p>

<p>As of August 3, 2026, checkpoint is affected by a vulnerability in the following products:</p>

<ul><li>Multi-Domain Security Management Server (MDS)
	<ul><li>R80</li>
		<li>R80.10</li>
		<li>R80.20</li>
		<li>R80.30</li>
		<li>R80.40</li>
		<li>R81</li>
		<li>R81.10</li>
		<li>R81.20 with Jumbo Hotfix Accumulator Take 160 or below</li>
		<li>R82 with Jumbo Hotfix Accumulator Take 121 or below</li>
		<li>R82.10 with Jumbo Hotfix Accumulator Take 39 or below</li>
	</ul></li>
	<li>Security Management Server
	<ul><li>R80</li>
		<li>R80.10</li>
		<li>R80.20</li>
		<li>R80.30</li>
		<li>R80.40</li>
		<li>R81</li>
		<li>R81.10</li>
		<li>R81.20 with Jumbo Hotfix Accumulator Take 160 or below</li>
		<li>R82 with Jumbo Hotfix Accumulator Take 121 or below</li>
		<li>R82.10 with Jumbo Hotfix Accumulator Take 39 or below</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://support.checkpoint.com/results/sk/sk185222">sk185222 - CVE-2026-18574 - Management Authentication Bypass</a></li>
	<li><a href="https://blog.checkpoint.com/security/">Check Point Security</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/tenable-inc-security-advisory-av26-773</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/tenable-inc-security-advisory-av26-773"/><title><![CDATA[Tenable, Inc. security advisory (AV26-773)]]></title><updated>2026-08-04T15:36:27Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8067" about="/en/alerts-advisories/tenable-inc-security-advisory-av26-773" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-773<br /><strong>Date: </strong>August 4, 2026</p>

<p>As of August 3, 2026, Tenable, Inc. is affected by a vulnerability in the following product:</p>

<ul><li>Sensor Proxy
	<ul><li>Prior to 1.4.2</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.tenable.com/security/tns-2026-21">[R1] Sensor Proxy Version 1.4.2 Fixes One Vulnerability - Security Advisory | Tenable®</a></li>
	<li><a href="https://www.tenable.com/security">Tenable Product Security Advisories</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-772</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-772"/><title><![CDATA[WebPros security advisory (AV26-772)]]></title><updated>2026-08-04T15:31:21Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8066" about="/en/alerts-advisories/webpros-security-advisory-av26-772" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-772<br /><strong>Date:</strong> August 4, 2026</p>

<p>As of July 31, 2026, WebPros is affected by vulnerabilities in the following products:</p>

<ul><li>WP Squared
	<ul><li>Prior to 11.138.1.6</li>
	</ul></li>
	<li>cPanel
	<ul><li>Prior to 11.110.0.137</li>
		<li>Prior to 11.118.0.71</li>
		<li>Prior to 11.126.0.78</li>
		<li>Prior to 11.134.0.48</li>
		<li>Prior to 11.136.0.32</li>
		<li>Prior to 138.1.6 ( WP2 )</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://support.cpanel.net/hc/en-us/articles/42285024734743-Security-CVE-2026-58047-HTTP-Request-Smuggling">Security: CVE-2026-58047 HTTP Request Smuggling – cPanel</a></li>
	<li><a href="https://support.cpanel.net/hc/en-us/articles/42285745783703-Security-CVE-2026-58048-Database-Privilege-Escalation">Security: CVE-2026-58048 Database Privilege Escalation – cPanel</a></li>
	<li><a href="https://support.cpanel.net/hc/en-us/sections/360007088193-Security">cPanel Security</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/dell-security-advisory-av26-771</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/dell-security-advisory-av26-771"/><title><![CDATA[Dell security advisory (AV26-771)]]></title><updated>2026-08-04T15:23:08Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8065" about="/en/alerts-advisories/dell-security-advisory-av26-771" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-771<br /><strong>Date: </strong>August 4, 2026</p>

<p>As of August 4, 2026, Dell is affected by vulnerabilities in the following products:</p>

<ul><li>Display and Peripheral Manager (DDPM Mac)
	<ul><li>Prior to 2.3.0.1005</li>
	</ul></li>
	<li>Monitor driver
	<ul><li>Prior to 1.0.0.0</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.dell.com/support/kbdoc/en-us/000481265/dsa-2026-295">DSA-2026-295: Security Update for Dell Monitor Driver for an Improper Link Resolution Before File Access ('Link Following') Vulnerability | Dell US</a></li>
	<li><a href="https://www.dell.com/support/kbdoc/en-us/000490035/dsa-2026-319-security-updates-for-dell-display-and-peripheral-manager-ddpm-mac-for-multiple-vulnerabilities">DSA-2026-319 Security Updates for Dell Display and Peripheral Manager (DDPM Mac) for Multiple Vulnerabilities | Dell US</a></li>
	<li><a href="https://www.dell.com/support/security/en-ca?lwp=rt">Security Advisories, Notices and Resources | Dell Canada</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/ibm-security-advisory-av26-770</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/ibm-security-advisory-av26-770"/><title><![CDATA[IBM security advisory (AV26-770)]]></title><updated>2026-08-04T15:06:33Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8064" about="/en/alerts-advisories/ibm-security-advisory-av26-770" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-770<br /><strong>Date: </strong>August 4, 2026</p>

<p>As of July 30, 2026, IBM is affected by vulnerabilities in the following products:</p>

<ul><li>App Connect Enterprise
	<ul><li>Prior to or equal to 12.0.12.27</li>
		<li>Prior to or equal to 13.0.7.2</li>
	</ul></li>
	<li>DataPower Gateway 10.5.0
	<ul><li>Prior to or equal to 10.5.0.21</li>
	</ul></li>
	<li>DataPower Gateway 10.6.0
	<ul><li>Prior to or equal to 10.6.0.9</li>
	</ul></li>
	<li>DataPower Gateway 10.6CD
	<ul><li>Prior to or equal to 10.6.6</li>
	</ul></li>
	<li>DataPower Gateway 11.0.0
	<ul><li>Prior to or equal to 11.0.0.1</li>
	</ul></li>
	<li>Db2
	<ul><li>Prior to or equal to 11.5.9</li>
		<li>Prior to or equal to 12.1.4</li>
	</ul></li>
	<li>Engineering Requirements Management DOORS and DOORS Web Access
	<ul><li>Prior to or equal to 9.6.1.13</li>
		<li>Prior to or equal to 9.7.2.11</li>
	</ul></li>
	<li>Enterprise Build of Quarkus
	<ul><li>Prior to or equal to 3.27.4.SP2</li>
		<li>Prior to or equal to 3.33.2.SP2</li>
	</ul></li>
	<li>HMC V10.3.1050.0
	<ul><li>Prior to or equal to 10.3.1064.0</li>
	</ul></li>
	<li>HMC V11.1.1110.0
	<ul><li>Prior to or equal to 11.1.1112.0</li>
	</ul></li>
	<li>Langflow OSS
	<ul><li>Prior to or equal to 1.10.0</li>
		<li>Prior to or equal to 1.10.1</li>
		<li>Prior to or equal to 1.8.4</li>
	</ul></li>
	<li>Operations Analytics - Log Analysis
	<ul><li>1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3</li>
		<li>1.3.6.0, 1.3.6.1</li>
		<li>1.3.7.0, 1.3.7.1, 1.3.7.2</li>
		<li>1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4</li>
	</ul></li>
	<li>Planning Analytics Local
	<ul><li>Prior to or equal to 2.1.21</li>
	</ul></li>
	<li>PowerVM Hypervisor
	<ul><li>Prior to or equal to FW1060.71</li>
		<li>Prior to or equal to FW1110.20</li>
		<li>Prior to or equal to FW950.H1</li>
	</ul></li>
	<li>Security Verify Access
	<ul><li>Prior to or equal to 10.0.9.1</li>
	</ul></li>
	<li>Security Verify Access Container
	<ul><li>Prior to or equal to 10.0.9.1</li>
	</ul></li>
	<li>UCD - IBM DevOps Deploy
	<ul><li>Prior to or equal to 8.0.1.13</li>
		<li>Prior to or equal to 8.1.2.6</li>
		<li>Prior to or equal to 8.2.1.0</li>
	</ul></li>
	<li>UCD - IBM UrbanCode Deploy
	<ul><li>Prior to or equal to 7.2.3.23</li>
		<li>Prior to or equal to 7.3.2.18</li>
	</ul></li>
	<li>Verify Identity Access
	<ul><li>Prior to or equal to 11.0.2</li>
	</ul></li>
	<li>Verify Identity Access Container
	<ul><li>Prior to or equal to 11.0.2</li>
	</ul></li>
	<li>WebSphere Application Server
	<ul><li>8.5</li>
		<li>9.0</li>
	</ul></li>
	<li>WebSphere Application Server - Liberty
	<ul><li>Prior to or equal to 26.0.0.7</li>
	</ul></li>
	<li>webMethods Integration (on prem)
	<ul><li>10.15, 10.11</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.</p>

<p>On August 4, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-9198 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<ul class="list-unstyled"><li><a href="https://www.ibm.com/support/pages/bulletin/">IBM Product Security Incident Response</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-9198">CISA KEV: CVE-2026-9198</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-768</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/google-security-advisory-av26-768"/><title><![CDATA[Google security advisory (AV26-768)]]></title><updated>2026-07-31T14:23:37Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8062" about="/en/alerts-advisories/google-security-advisory-av26-768" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-768<br /><strong>Date: </strong> July 31, 2026</p>

<p>As of July 30, 2026, Google is affected by vulnerabilities in the following product:</p>

<ul><li>Chrome - Prior to 151.0.7922.72</li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html">Google Chrome Security Advisory</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/rails-security-advisory-av26-767</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/rails-security-advisory-av26-767"/><title><![CDATA[Rails security advisory (AV26-767)]]></title><updated>2026-07-31T13:17:03Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8061" about="/en/alerts-advisories/rails-security-advisory-av26-767" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-767<br /><strong>Date:</strong> July 31, 2026</p>

<p>As of July 30, 2026, Rails is affected by a vulnerability in the following product:</p>

<ul><li>Rails
	<ul><li>Prior to 8.0.5.1</li>
		<li>Prior to 8.1.3.1</li>
		<li>Prior to 7.2.3.2</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://github.com/rails/rails/releases/tag/v7.2.3.2">Release 7.2.3.2 · rails/rails - GitHub</a></li>
	<li><a href="https://github.com/rails/rails/releases/tag/v8.0.5.1">Release 8.0.5.1 · rails/rails - GitHub</a></li>
	<li><a href="https://github.com/rails/rails/releases/tag/v8.1.3.1">Release 8.1.3.1 · rails/rails - GitHub</a></li>
	<li><a href="https://discuss.rubyonrails.org/t/cve-2026-66066-possible-arbitrary-file-read-and-remote-code-execution-in-active-storage-variant-processing/91432">[CVE-2026-66066] Possible arbitrary file read and remote code execution in Active Storage variant processing</a></li>
	<li><a href="https://github.com/rails/rails/releases">Release list - rails/rails</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-766</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/solarwinds-security-advisory-av26-766"/><title><![CDATA[SolarWinds security advisory (AV26-766)]]></title><updated>2026-07-31T13:00:19Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8060" about="/en/alerts-advisories/solarwinds-security-advisory-av26-766" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-766<br /><strong>Date: </strong>July 30, 2026</p>

<p>As of July 30, 2026, SolarWinds is affected by a vulnerability in the following product:</p>

<ul><li>Web Help Desk (WHD)
	<ul><li>Prior to 2026.2.1</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-2-1_release_notes.htm">WHD 2026.2.1 release notes</a></li>
	<li><a href="https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28323">SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability (CVE-2026-28323)</a></li>
	<li><a href="https://www.solarwinds.com/trust-center/security-advisories">SolarWinds Security Vulnerabilities</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/gladinet-security-advisory-av26-765</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/gladinet-security-advisory-av26-765"/><title><![CDATA[Gladinet security advisory (AV26-765)]]></title><updated>2026-07-30T18:24:27Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8058" about="/en/alerts-advisories/gladinet-security-advisory-av26-765" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-765<br /><strong>Date: </strong>July 30, 2026</p>

<p>As of July 30, 2026, Gladinet is affected by vulnerabilities in the following product:</p>

<ul><li>CentreStack
	<ul><li>Prior to 17.5</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.centrestack.com/">CentreStack</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/php-group-security-advisory-av26-764</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/php-group-security-advisory-av26-764"/><title><![CDATA[PHP Group security advisory (AV26-764)]]></title><updated>2026-07-30T18:11:55Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8057" about="/en/alerts-advisories/php-group-security-advisory-av26-764" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-764<br /><strong>Date: </strong>July 30, 2026</p>

<p>As of July 30, 2026, PHP Group is affected by vulnerabilities in the following product:</p>

<ul><li>PHP
	<ul><li>Prior to 8.2.33</li>
		<li>Prior to 8.3.33</li>
		<li>Prior to 8.4.24</li>
		<li>Prior to 8.5.9</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://github.com/php/php-src/security/advisories/GHSA-7qpv-r5mr-78m4">SQL injection in ext-pgsql via E'...' backslash breakout</a></li>
	<li><a href="https://github.com/php/php-src/security/advisories/GHSA-x692-q9x7-8c3f">Out-of-bounds write in bccomp() via crafted operand and scale</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/vmware-security-advisory-av26-763</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/vmware-security-advisory-av26-763"/><title><![CDATA[VMware security advisory (AV26-763)]]></title><updated>2026-07-30T17:53:01Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8056" about="/en/alerts-advisories/vmware-security-advisory-av26-763" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-763<br /><strong>Date: </strong>July 30, 2026</p>

<p>As of July 30, 2026, VMware is affected by vulnerabilities in the following products:</p>

<ul><li>Cloud Foundation
	<ul><li>5.x</li>
		<li>9.0.x.x</li>
		<li>9.1.x.x</li>
		<li>Prior to 5.2.3</li>
	</ul></li>
	<li>ESX
	<ul><li>Prior to ESXi-9.0.2.0100-25595025</li>
		<li>Prior to ESXi-9.1.0.0-25370933</li>
		<li>Prior to ESXi-9.1.0.0200-25557999</li>
		<li>Prior to ESXi80U3i-25205845</li>
		<li>Prior to ESXi80U3k-25595708</li>
	</ul></li>
	<li>Fusion
	<ul><li>Prior to 26H1</li>
	</ul></li>
	<li>Telco Cloud Infrastructure
	<ul><li>3.0</li>
	</ul></li>
	<li>Telco Cloud Platform
	<ul><li>4.x</li>
		<li>5.0.x</li>
		<li>5.1.x</li>
	</ul></li>
	<li>Workstation
	<ul><li>Prior to 26H1</li>
	</ul></li>
	<li>vCenter
	<ul><li>Prior to 8.0 U3k</li>
		<li>Prior to 9.0.2.0100</li>
		<li>Prior to 9.1.0.0300</li>
	</ul></li>
	<li>vSphere Foundation
	<ul><li>9.0.x.x</li>
		<li>9.1.x.x</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017">VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)</a></li>
	<li><a href="https://support.broadcom.com/web/ecx/security-advisory">Security Advisories - VMware Cloud Foundation</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/control-systems-phoenix-contact-security-advisory-av26-762</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/control-systems-phoenix-contact-security-advisory-av26-762"/><title><![CDATA[[Control Systems] Phoenix Contact security advisory (AV26-762)]]></title><updated>2026-07-30T14:49:52Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8055" about="/en/alerts-advisories/control-systems-phoenix-contact-security-advisory-av26-762" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-762<br /><strong>Date: </strong>July 30, 2026</p>

<p>As of July 30, 2026, Phoenix Contact is affected by vulnerabilities in the following products:</p>

<ul><li>CHARX SEC-3000
	<ul><li>Prior to 1.9.1</li>
	</ul></li>
	<li>CHARX SEC-3050
	<ul><li>Prior to 1.9.1</li>
	</ul></li>
	<li>CHARX SEC-3100
	<ul><li>Prior to 1.9.1</li>
	</ul></li>
	<li>CHARX SEC-3150
	<ul><li>Prior to 1.9.1</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.certvde.com/en/advisories/VDE-2026-008/">Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SEC3xxx charging controllers</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-761</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-761"/><title><![CDATA[WebPros security advisory (AV26-761)]]></title><updated>2026-07-30T14:36:27Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8054" about="/en/alerts-advisories/webpros-security-advisory-av26-761" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-761<br /><strong>Date: </strong>July 30, 2026</p>

<p>As of July 30, 2026, WebPros is affected by a vulnerability in the following product:</p>

<ul><li>Plesk
	<ul><li>Prior to 18.0.79.4</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://support.plesk.com/hc/en-us/articles/42139500580119-Vulnerability-CVE-2026-58046-Blind-SQL-injection-in-Plesk-s-XML-RPC-API">Vulnerability CVE-2026-58046: Blind SQL injection in Plesk's XML-RPC API – Plesk</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-760</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-760"/><title><![CDATA[Adobe security advisory (AV26-760)]]></title><updated>2026-07-30T14:18:55Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8053" about="/en/alerts-advisories/adobe-security-advisory-av26-760" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-760<br /><strong>Date: </strong>July 30, 2026</p>

<p>As of July 29, 2026, Adobe is affected by vulnerabilities in the following product:</p>

<ul><li>Adobe Campaign Classic
	<ul><li>ALL except 7.4.3 build 9398</li>
		<li>Prior to or equal to 7.4.3 build 9397</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://helpx.adobe.com/security/products/campaign/apsb26-114.html">Security update available for Adobe Campaign Classic | APSB26-114</a></li>
	<li><a href="https://helpx.adobe.com/security/Home.html">Adobe Product Security Incident Response Team</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759"/><title><![CDATA[Spring security advisory (AV26-759)]]></title><updated>2026-07-30T13:50:36Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8051" about="/en/alerts-advisories/spring-security-advisory-av26-759" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-759<br /><strong>Date: </strong>July 30, 2026</p>

<p>As of July 30, 2026, Spring is affected by vulnerabilities in the following products:</p>

<ul><li>Spring Tools for Eclipse
	<ul><li>Prior to or equal to 5.2.0</li>
	</ul></li>
	<li>Spring Tools for VSCode / Cursor / Theia
	<ul><li>Prior to or equal to 2.2.0</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://spring.io/security/cve-2026-47858/">CVE-2026-47858: live information startup mode is vulnerable for remote code execution</a></li>
	<li><a href="https://spring.io/security/cve-2026-47873/">CVE-2026-47873: Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces </a></li>
	<li><a href="https://spring.io/security/cve-2026-47882/">CVE-2026-47882: Spring Boot DevTools remote secret generated with a non-cryptographic PRNG</a></li>
	<li><a href="https://spring.io/security/cve-2026-59326/">CVE-2026-59326: HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server</a></li>
	<li><a href="https://spring.io/security/cve-2026-59327/">CVE-2026-59327: Cleartext Storage of Spring Boot DevTools Remote Secret in Eclipse Launch Configurations </a></li>
	<li><a href="https://spring.io/security/cve-2026-59328/">CVE-2026-59328: Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips</a></li>
	<li><a href="https://spring.io/security/">Spring | Security Advisories</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-758</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-758"/><title><![CDATA[GitLab security advisory (AV26-758)]]></title><updated>2026-07-30T13:11:52Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8050" about="/en/alerts-advisories/gitlab-security-advisory-av26-758" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-758<br /><strong>Date: </strong>July 30, 2026</p>

<p>As of July 29, 2026, GitLab is affected by vulnerabilities in the following product:</p>

<ul><li>GitLab
	<ul><li>Prior to 19.0.5</li>
		<li>Prior to 19.1.3</li>
		<li>Prior to 19.2.1</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-1-released/">GitLab Patch Release: 19.2.1, 19.1.3, 19.0.5</a></li>
	<li><a href="https://docs.gitlab.com/releases/">GitLab release notes</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-757</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-757"/><title><![CDATA[Cisco security advisory (AV26-757)]]></title><updated>2026-07-30T12:45:49Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8049" about="/en/alerts-advisories/cisco-security-advisory-av26-757" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-757<br /><strong>Date: </strong>July 29, 2026</p>

<p>As of July 29, 2026, Cisco is affected by a vulnerability in the following product:</p>

<ul><li>Cisco Secure Firewall Management Center (FMC)
	<ul><li>Prior to 7.0.9.1</li>
		<li>Prior to 7.2.11.1</li>
		<li>Prior to 7.4.7.1</li>
		<li>Prior to 7.6.5.1</li>
		<li>Prior to 7.7.12.1</li>
		<li>Prior to 10.0.1.1</li>
	</ul></li>
</ul><p class="mrgn-bttm-md">Cisco has indicated that CVE-2026-20316 is being exploited.</p>

<p class="mrgn-bttm-md">On July 29, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20316 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://tools.cisco.com/security/center/publicationListing.x">Cisco Security Advisories</a></li>
	<li><a href="https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh">Cisco Secure Firewall Management Center Software Static Credential Vulnerability</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20316">CISA KEV : CVE-2026-20316</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-756</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-756"/><title><![CDATA[Adobe security advisory (AV26-756)]]></title><updated>2026-07-29T14:33:45Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8048" about="/en/alerts-advisories/adobe-security-advisory-av26-756" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-756<br /><strong>Date:</strong> July 29, 2026</p>

<p>As of July 28, 2026, Adobe is affected by vulnerabilities in the following products:</p>

<ul><li>Adobe Bridge
	<ul><li>Prior to 15.1.7</li>
		<li>Prior to 16.0.6</li>
	</ul></li>
	<li>Format Plugins
	<ul><li>Prior to 2026.07</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://helpx.adobe.com/security/products/formatplugins/apsb26-87.html">Security updates available for Adobe Format Plugins | APSB26-87</a></li>
	<li><a href="https://helpx.adobe.com/security/products/bridge/apsb26-89.html">Security Updates Available for Adobe Bridge | APSB26-89</a></li>
	<li><a href="https://helpx.adobe.com/security/Home.html">Adobe Product Security Incident Response Team</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-755</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-755"/><title><![CDATA[Progress security advisory (AV26-755)]]></title><updated>2026-07-28T18:14:11Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8046" about="/en/alerts-advisories/progress-software-security-advisory-av26-755" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-755<br /><strong>Date: </strong>July 28, 2026</p>

<p>As of July 27, 2026, Progress Software is affected by vulnerabilities in the following products:</p>

<ul><li>ECS Connection Manager
	<ul><li>Prior to 7.2.63.3</li>
	</ul></li>
	<li>LoadMaster
	<ul><li>Prior to 7.2.54.19</li>
		<li>Prior to 7.2.63.3</li>
	</ul></li>
	<li>MOVEit WAF
	<ul><li>Prior to 7.2.63.3</li>
	</ul></li>
	<li>Multi Tenant
	<ul><li>Prior to 7.1.35.16</li>
	</ul></li>
	<li>Object Scale Connection Manager
	<ul><li>Prior to 7.2.63.3</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-July-2026-CVE-2026-59686-CVE-2026-59687-CVE-2026-59688-CVE-2026-59689-CVE-2026-59690">LoadMaster Critical Security Bulletin – July 2026 – (CVE-2026-59686, CVE-2026-59687, CVE-2026-59688, CVE-2026-59689, CVE-2026-59690) </a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/vercel-security-advisory-av26-754</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/vercel-security-advisory-av26-754"/><title><![CDATA[Vercel security advisory (AV26-754)]]></title><updated>2026-07-28T14:40:27Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8045" about="/en/alerts-advisories/vercel-security-advisory-av26-754" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-754<br /><strong>Date:</strong> July 28, 2026</p>

<p>As of July 27, 2026, Vercel is affected by vulnerabilities in the following product:</p>

<ul><li>next.js
	<ul><li>Prior to 15.5.21</li>
		<li>Prior to 16.2.11</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://github.com/vercel/next.js/releases/tag/v15.5.21">Release v15.5.21</a></li>
	<li><a href="https://github.com/vercel/next.js/releases/tag/v16.2.11">Release v16.2.11</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/apple-security-advisory-av26-753</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/apple-security-advisory-av26-753"/><title><![CDATA[Apple security advisory (AV26-753)]]></title><updated>2026-07-28T14:37:10Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8044" about="/en/alerts-advisories/apple-security-advisory-av26-753" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number:</strong> AV26-753<br /><strong>Date:</strong> July 28, 2026</p>

<p>As of July 27, 2026, Apple is affected by vulnerabilities in the following products:</p>

<ul><li>iOS and iPadOS
	<ul><li>Prior to 26.6</li>
	</ul></li>
	<li>macOS
	<ul><li>Prior to 14.8.8</li>
		<li>Prior to 15.7.8</li>
		<li>Prior to 26.6</li>
	</ul></li>
	<li>tvOS
	<ul><li>Prior to 26.6</li>
	</ul></li>
	<li>visionOS
	<ul><li>Prior to 26.6</li>
	</ul></li>
	<li>Safari
	<ul><li>Prior to 26.6</li>
	</ul></li>
	<li>watchOS
	<ul><li>Prior to 26.6</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://support.apple.com/en-us/100100">Apple security releases - Apple Support</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/arista-networks-security-advisory-av26-751</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/arista-networks-security-advisory-av26-751"/><title><![CDATA[Arista Networks security advisory (AV26-751)]]></title><updated>2026-07-28T14:34:26Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8042" about="/en/alerts-advisories/arista-networks-security-advisory-av26-751" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-751<br /><strong>Date: </strong>July 28, 2026</p>

<p>As of July 27, 2026, Arista Networks is affected by vulnerabilities in the following product:</p>

<ul><li>VeloCloud Orchestrator On-Prem
	<ul><li>from 5.2.0 to versions prior to 5.2.3.14</li>
		<li>from 6.1.0 to versions prior to 6.1.3.4</li>
		<li>from 6.4.0 to versions prior to 6.4.2.4</li>
		<li>from 7.0.0 to versions prior to 7.0.0.1</li>
	</ul></li>
</ul><p>On July 27, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-16812 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://www.arista.com/en/support/advisories-notices/security-advisory/24364-security-advisory-0144">Security Advisory 0144</a></li>
	<li><a href="https://www.arista.com/en/support/advisories-notices/security-advisory/24365-security-advisory-0145">Security Advisory 0145</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16812">CISA KEV: CVE-2026-16812</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/apache-security-advisory-av26-749</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/apache-security-advisory-av26-749"/><title><![CDATA[Apache security advisory (AV26-749)]]></title><updated>2026-07-28T14:32:14Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8041" about="/en/alerts-advisories/apache-security-advisory-av26-749" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-749<br /><strong>Date: </strong>July 28, 2026</p>

<p>As of July 27, 2026, Apache is affected by vulnerabilities in the following product:</p>

<ul><li>Apache Thrift
	<ul><li>Prior to 0.24.0</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://lists.apache.org/thread/p008svsjf9p6bj47wyyf5dgglq5z7xoq">CVE-2026-48586: Apache Thrift: TZlibTransport Decompression Size Limit</a></li>
	<li><a href="https://lists.apache.org/thread/fmjl8l415tj9zwlob8v2dr5hq1d0hts7">CVE-2026-49158: Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb</a></li>
	<li><a href="https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo">CVE-2026-55969: Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()</a></li>
	<li><a href="https://lists.apache.org/thread/z2myopbovxngfvchdz8hddots9p5ffbt">CVE-2026-58023: Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/erlang-security-advisory-av26-750</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/erlang-security-advisory-av26-750"/><title><![CDATA[Erlang security advisory (AV26-750)]]></title><updated>2026-07-27T19:52:49Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8040" about="/en/alerts-advisories/erlang-security-advisory-av26-750" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial Number: </strong>AV26-750<br /><strong>Date: </strong>July 27, 2026</p>

<p>As of July 27, 2026, Erlang is affected by vulnerabilities in the following product:</p>

<ul><li>OTP
	<ul><li>10.2 Prior to 11.7.4</li>
		<li>6.0 Prior to 17.0.4</li>
	</ul></li>
</ul><p>The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://github.com/erlang/otp/security/advisories/">Security Advisories · erlang/otp · GitHub </a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/fortinet-security-advisory-av26-109</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/fortinet-security-advisory-av26-109"/><title><![CDATA[Fortinet security advisory (AV26-109) – Update 1]]></title><updated>2026-07-27T18:14:46Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="7261" about="/en/alerts-advisories/fortinet-security-advisory-av26-109" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-109<br /><strong>Date: </strong>February 10, 2026<br /><strong>Updated:</strong> July 27, 2026</p>

<p>On February 10, 2026, Fortinet published security advisories to address vulnerabilities in the following products:</p>

<ul><li>FortiAuthenticator 6.6 – versions 6.6.0 to 6.6.6</li>
	<li>FortiAuthenticator 6.5 – all versions</li>
	<li>FortiAuthenticator 6.4 – all versions</li>
	<li>FortiAuthenticator 6.3 – all versions</li>
	<li>FortiClientWindows 7.4 – versions 7.4.0 to 7.4.4</li>
	<li>FortiClientWindows 7.2 – versions 7.2.0 to 7.2.12</li>
	<li>FortiClientWindows 7.0 – all versions</li>
	<li>FortiOS 7.6 – versions 7.6.0 to 7.6.4</li>
	<li>FortiOS 7.4 – versions 7.4.0 to 7.4.10</li>
	<li>FortiOS 7.2 – all versions</li>
	<li>FortiOS 7.0 – all versions</li>
	<li>FortiOS 6.4 – all versions</li>
	<li>FortiSandbox 5.0 – version 5.0 to 5.1</li>
	<li>FortiSandbox 4.4 – version 4.4.0 to 4.4.7</li>
	<li>FortiSandbox 4.2 – all versions</li>
	<li>FortiSandbox 4.0 – all versions</li>
</ul><h2 class="h3">Update 1</h2>

<p>On July 27, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-68686 to their Known Exploited Vulnerabilities (KEV) Database.</p>

<p>The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.</p>

<ul class="list-unstyled"><li><a href="https://www.fortiguard.com/psirt?filter=1&amp;version=&amp;severity=5&amp;severity=4&amp;severity=3&amp;severity=2">Fortinet PSIRT Advisories</a></li>
	<li><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-68686">CISA KEV: CVE-2025-68686</a></li>
</ul></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry><entry><id>https://cyber.gc.ca/en/alerts-advisories/redis-security-advisory-av26-748</id><link rel="alternate" href="https://cyber.gc.ca/en/alerts-advisories/redis-security-advisory-av26-748"/><title><![CDATA[Redis security advisory (AV26-748)]]></title><updated>2026-07-27T18:12:06Z</updated><summary><![CDATA[]]></summary><content><![CDATA[<article data-history-node-id="8039" about="/en/alerts-advisories/redis-security-advisory-av26-748" class="cccs-threats full clearfix">

  
    

  
  <div class="content">
      <div class="layout layout--onecol">
    <div  class="layout__region layout__region--content">
      
<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-field-blocknodecccs-threatslinks clearfix">
  
    

      
  </div>

<div data-block-plugin-id="field_block:node:cccs_threats:body" class="block block-layout-builder block-field-blocknodecccs-threatsbody clearfix">
  
    

      
            <div class="field field--name-body field--type-text-with-summary field--label-hidden field--item"><p><strong>Serial number: </strong>AV26-748<br /><strong>Date: </strong>July 27, 2026</p>

<p>As of July 25, 2026, Redis is affected by a vulnerability in the following product:</p>

<ul><li>Redis</li>
	<li>Versions prior to 8.8.0</li>
</ul><p class="mrgn-bttm-md">The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.</p>

<ul class="list-unstyled"><li><a href="https://github.com/redis/redis/compare/8.6.4...8.8.0">Comparing 8.6.4...8.8.0</a></li>
	<li><a href="https://github.com/redis/redis/pull/15081">Reject corrupt stream RDB with shared NACK across consumers #15081</a></li>
	<li><a href="https://github.com/redis/redis/releases">Releases · redis/redis · GitHub</a></li>
</ul><!--CUT & PASTE the French version info --></div>
      
  </div>

    </div>
  </div>

  </div>

</article>
]]></content><author><name><![CDATA[Canadian Centre for Cyber Security]]></name></author></entry></feed>