Rapid Alerts

Check Point security advisory (AV26-1154)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1154 Date: November 12, 2026 As of November 12, 2026, Check Point is affected by vulnerabilities in the following products: Check Point Force Firewalls Multiple versions Check Point Management and Log Servers Multiple versions…"

Docker security advisory (AV26-1153)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1153 Date: November 12, 2026 As of November 10, 2026, Docker is affected by vulnerabilities in the following products: Docker Engine Prior to 23.0.0 Moby Prior to 2.0.0-beta.28 SwarmKit Prior to…"

React security advisory (AV26-1152)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1152 Date: November 12, 2026 As of November 10, 2026, React is affected by a vulnerability in the following product: react Prior to 19.0.9 Prior to 19.1.10 Prior to 19.2.9 Prior to 19.3.1 The Cyber Centre encourages users and…"

2026-020: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

CERT-EU Security Advisories: "On 12 November 2026, the Cloud Software Group published security bulletins for its Citrix products addressing 28 memory flaws in Citrix NetScaler ADC and Citrix NetScaler Gateway."

Progress Software security advisory (AV26-1148)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1148 Date: November 12, 2026 As of November 12, 2026, Progress Software is affected by vulnerabilities in the following products: Telerik Report Server Prior to 12.3.26.1110 Telerik Reporting Prior to 20.3.26.1110 Telerik UI for…"

Citrix security advisory (AV26-1150)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1150 Date: November 12, 2026 As of November 12, 2026, Citrix is affected by vulnerabilities in the following products: NetScaler ADC and NetScaler Gateway Prior to 13.1-64.39 Prior to 14.1-73.57 NetScaler ADC FIPS Prior to…"

N-able security advisory (AV26-1143)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1143 Date: November 12, 2026 As of November 10, 2026, N-able is affected by vulnerabilities in the following product: N-central Prior to 2026.4.1.26 Open-source reporting indicates that CVE-2026-125883 is exploited in the wild."

Siemens Building Automation and Energy Products (ICSA-26-316-01)

CISA Cybersecurity Advisories: "View CSAF Summary On October 21, 2026, the PHP project and security researchers disclosed two critical, unauthenticated remote code execution vulnerabilities in the core PHP language runtime known as "php2shell" (tracked as CVE-2026-109618 and…"

Siemens RUGGEDCOM APE1808 (ICSA-26-316-04)

CISA Cybersecurity Advisories: "View CSAF Summary Palo Alto Networks has published information on a vulnerability in PAN-OS related to the Node2Shell vulnerability. This advisory lists the related Siemens Industrial products affected by this vulnerability."

Siemens Desigo, Gridscale (ICSA-26-316-02)

CISA Cybersecurity Advisories: "View CSAF Summary On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as "Node2Shell" (tracked as CVE-2026-111497)."

Multiple Vulnerabilities in Fortinet Products Could Allow for Arbitrary Code Execution

MS-ISAC Advisories: "Multiple vulnerabilities have been discovered in Fortinet FortiOS, FortiManager, FortiAnalyzer, and other Fortinet products, the most severe of which could allow for arbitrary code execution."

Google security advisory (AV26-1140) - Update 1

Canada CCCS Alerts & Advisories: "Serial number: AV26-1140 Date: November 10, 2026 As of November 9, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to 157.0.8103.50/.51 (Windows/Mac), and 157.0.8103.50 (Linux)…"

Critical Patches Issued for Microsoft Products, November 10, 2026

MS-ISAC Advisories: "Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution."

Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution

MS-ISAC Advisories: "Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could result in arbitrary code execution."

Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

MS-ISAC Advisories: "Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution."

Multiple Vulnerabilities in SAP Products Could Allow for Arbitrary Code Execution

MS-ISAC Advisories: "Multiple vulnerabilities have been discovered in SAP Products, the most severe of which could allow for arbitrary code execution."

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

MS-ISAC Advisories: "Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution."

Multiple Vulnerabilities in SonicWall SonicOS Could Allow for Authentication Bypass

MS-ISAC Advisories: "Multiple vulnerabilities have been discovered in SonicWall SonicOS, the most severe of which could allow for Authentication Bypass. SonicOS is the operating system that powers SonicWall firewalls and network security appliances."

IBM security advisory (AV26-1135)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1135 Date: November 9, 2026 As of November 4, 2026, IBM is affected by vulnerabilities in the following products: IBM MQ Prior to or equal to 10.0.0.5 LTS and CD Prior to or equal to 9.2.0.44 LTS Prior to or equal to 9.3.0.42 LTS…"

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Alerts (alerts-only): "CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation."

SonicWall security advisory (AV26-1133)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1133 Date: November 6, 2026 As of November 6, 2026, SonicWall is affected by a vulnerability in the following product: SonicOS prior to 7.3.4-7013 prior to 8.2.2-8015 SonicWall indicates that CVE-2026-19868 is being exploited."

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

MS-ISAC Advisories: "Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution."

US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems

CISA Cybersecurity Advisories: "Overview The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Health and Human Services (HHS), U.S. Department of Agriculture (USDA), and the Department of Transportation (DoT) - hereafter referred to…"

OpenBSD security advisory (AV26-1130)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1130 Date: November 5, 2026 As of November 5, 2026, OpenBSD is affected by a vulnerability in the following product: OpenSSH Prior to 10.6p2 The Cyber Centre encourages users and administrators to review the provided web links…"

WatchGuard security advisory (AV26-1125)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1125 Date: November 4, 2026 As of November 4, 2026, WatchGuard is affected by vulnerabilities in the following product: AuthPoint Authentication Gateway Prior to 7.6.0 The Cyber Centre encourages users and administrators to…"

Docker security advisory (AV26-1123)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1123 Date: November 4, 2026 As of November 3, 2026, Docker is affected by vulnerabilities in the following products: Docker Buildx Prior to 0.37.2 Docker Desktop Prior to 4.98.0 The Cyber Centre encourages users and…"

Tanium security advisory (AV26-1120)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1120 Date: November 4, 2026 As of November 3, 2026, Tanium is affected by vulnerabilities in the following product: Threat Response Prior to 4.12.353 Prior to 4.17.333 Prior to 4.9.480 The Cyber Centre encourages users and…"

[Control Systems] Phoenix Contact security advisory (AV26-1121)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1121 Date: November 4, 2026 As of November 4, 2026, Phoenix Contact is affected by vulnerabilities in the following product: PLCnext Engineer Prior to 2026.6 The Cyber Centre encourages users and administrators to review the…"

HPE security advisory (AV26-1119)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1119 Date: November 4, 2026 As of November 3, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: HPE Networking Fabric Composer (AFC) Prior to 7.3.5 Prior to 7.4.1 HPE Networking…"

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Alerts (alerts-only): "CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation."

PostgreSQL security advisory (AV26-1115)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1115 Date: November 3, 2026 As of November 2, 2026, PostgreSQL is affected by vulnerabilities in the following product: psqlODBC Prior to 18.00.0006 The Cyber Centre encourages users and administrators to review the provided web…"

Zyxel security advisory (AV26-1114)

Canada CCCS Alerts & Advisories: "Serial number: AV26-1114 Date: November 3, 2026 As of November 3, 2026, Zyxel is affected by vulnerabilities in the following products: Zyxel GS1900 series switches Multiple versions and models Zyxel APs, FWA7, and Security Routers Multiple versions…"

Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years

UK NCSC News: "The NCSC warns that ‘tech on the cheap’ has left UK organisations exposed to AI uncovering and exploiting longstanding cyber security weaknesses and calls for urgent investment in resilience."

Barracuda Networks security advisory (AV26-1112)

Canada CCCS Alerts & Advisories: "Serial Number: AV26-1112 Date: November 2, 2026 As of November 2, 2026, Barracuda Networks is affected by a vulnerability in the following products: Barracuda Email Security Gateway (ESG) Prior to 9.4.0.030 Barracuda Load Balancer Application…"

Siemens SENTRON 3NA COM Fuse

CISA Cybersecurity Advisories: "View CSAF Summary Sentron 3NA Com Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition."

MISP security advisory (AV26-775)

Acrisure KARR BT and DR-100

CISA Cybersecurity Advisories: "View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to perform unauthorized vehicle control operations."

N-able security advisory (AV26-769)

SolarWinds security advisory (AV26-766)

Gladinet security advisory (AV26-765)

MZ Automation lib60870

CISA Cybersecurity Advisories: "View CSAF Summary Successful exploitation of these vulnerabilities could crash the device being accessed."

[Control Systems] Phoenix Contact security advisory (AV26-762)

Progress Software security advisory (AV26-755)

Siemens Mendix Runtime

CISA Cybersecurity Advisories: "View CSAF Summary Mendix documentation for access rules does not adequately describe the special behavior of the System.User entity, leaving developers without sufficient guidance to configure access rules securely."

A Vulnerability in VeloCloud Orchestrator (VCO) On-Prem Could Allow for Remote Code Execution

MS-ISAC Advisories: "A vulnerability has been discovered in VeloCloud Orchestrator (VCO) On-Prem that could allow for remote code execution."

Erlang security advisory (AV26-750)

HPE security advisory (AV26-745)

[Control Systems] Moxa security advisory (AV26-742)

Google Chrome security advisory (AV26-741)

Microsoft Edge security advisory (AV26-740)

MZ Automation lib60870

CISA Cybersecurity Advisories: "View CSAF Summary Successful exploitation of this vulnerability could cause the parsing process to crash, which will cause a denial of service."

Exim security advisory (AV26-737)

n8n security advisory (AV26-733)

ISC BIND security advisory (AV26-732)

SolarWinds security advisory (AV26-728)