Serial number:AV26-172
Date:February 25, 2026

On February 25, 2026, Juniper Networks published a security advisory to address vulnerabilities in the following products. Included was a critical update for the following:

• Junos OS Evolved on PTX Series – 25.4 versions prior to 25.4R1-S1-EVO, 25.4R2-EVO

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• 2026-02 Out-of-Cycle Security Bulletin: Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root (CVE-2026-21902)
• Juniper Networks

Serial number:AV26-166
Date: February 25, 2026
Updated: February 25, 2026

On February 25, 2026, Cisco published security advisories to address critical vulnerabilities in the following products:

• Cisco Catalyst SD-WAN Controller – multiple versions
• Cisco Catalyst SD-WAN Manager – multiple versions
• Cisco Nexus 3600 and 9500-R Switching Platform – multiple versions
• Cisco Nexus 9000 Series Fabric Switches – multiple versions
• Cisco UCS Software (UCS Manager Mode) – versions prior to 4.3(6e)
• Cisco UCS Software (Intersight Managed Mode) – versions prior to 4.3(6.260003)

Cisco has indicated that CVE-2026-20127 has been exploited.

Update 1

On February 25, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20127 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested recommendations, and apply the necessary updates when available.

• Cisco Security Advisories
• Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
• Cisco Catalyst SD-WAN Vulnerabilities
• Cisco Nexus 3600 and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability
• Cisco Nexus 9000 Series Fabric Switches in ACI Mode SNMP Denial of Service Vulnerability
• Cisco Nexus 9000 Series Fabric Switches in ACI Mode Denial of Service Vulnerability
• Cisco NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability
• CISA KEV : CVE-2026-20127

Serial number:AV26-171
Date:February 25, 2026

On February 25, 2026, JetBrains published security advisories to address vulnerabilities in the following products:

• JetBrains TeamCity – versions prior to 2025.11.3
• JetBrains YouTrack – versions prior to 2025.3.121962

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• JetBrains – Fixed security issues

Serial number:AV26-170
Date:February 25, 2026

On February 25, 2026, GitLab published a security advisory to address vulnerabilities in the following products:

• GitLab Community Edition (CE) – versions prior to 18.9.1, 18.8.5 and 18.7.5
• GitLab Enterprise Edition (EE) – versions prior to 18.9.1, 18.8.5 and 18.7.5

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• GitLab Patch Release: 18.9.1, 18.8.5, 18.7.5
• GitLab Releases

Serial number:AV26-19
Date:February 25, 2026

On February 24, 2026, AMD published a security advisory to address vulnerabilities in the following products:

• AMD Athlon and AMD Ryzen Processors – multiple models and versions
• AMD Ryzen Embedded Processors – multiple models and versions
• AMD EPYC and AMD EPYC Embedded Series Processors – multiple models and versions

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Guest Initiated Machine Check Errors AMD-SB-7059
• AMD Product Security

Serial number:AV26-168
Date:February 25, 2026

On February 24, 2026, Trend Micro published a security advisory to address critical vulnerabilities in the following products:

• Apex One (on-premise) – versions prior to 2019 (on-prem)
• Apex One as a service – SaaS
• Trend Vision One Endpoint - Standard Endpoint Protection – Saas

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• security bulletin: Apex One and Apex One (Mac) - February 2026
• Trend Micro Business Success Vulnerability Response