Serial number: AV26-330
Date: April 8, 2026
Update: April 16, 2026

On April 8, 2026, Apache published a security advisory to address a vulnerability in the following products:

• Apache ActiveMQ Broker - versions prior to 5.19.4
• Apache ActiveMQ Broker - 6.0.0 versions prior to 6.2.3

Update 1

On April 16, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-34197 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• CVE-2026-34197
• CISA KEV: CVE-2026-34197

Serial number:AV26-361
Date:April 16, 2026

On April 16, 2026, HPE published a security advisory to address vulnerabilities in the following product:

• HPE Cray Supercomputing EX420 Compute Blade – versions prior to 1.91

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• HPESBCR05043 rev.1 - HPE Cray Supercomputing EX Servers Using Intel Processors, INTEL-SA-01397, 2026.1 IPU, Intel Trust Domain Extensions (Intel TDX) module Advisory, Multiple Vulnerabilities
• HPE Security Bulletin Library

Serial number:AV26-360
Date:April 16, 2026

On April 10, 2026, Nginx UI published a security advisory to address a critical vulnerability in the following product:

• Nginx UI – version v2.3.5 and prior

Open-source reporting indicates that the CVE-2026-33032 vulnerability is being exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates, when available.

• Nginx UI - CVE-2026-33032
• NVD - CVE-2026-33032 Detail

Serial number:AV26-359
Date:April 16, 2026

On April 15, 2026, Drupal published a security advisory to address a critical vulnerability in the following product:

• Drupal core – multiple versions

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates or perform the suggested mitigations.

• Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001
• Drupal Security Advisories

Serial number:AV26-358
Date:April 15, 2026

On April 15, 2026, Google published a security advisory to address vulnerabilities in the following product:

• Stable Channel Chrome for Desktop – versions prior to 147.0.7727.101/102 (Windows/Mac) and 147.0.7727.101 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory

Serial number:AV26-357
Date:April 15, 2026

On April 15, 2026, Cisco published security advisories to address vulnerabilities in the following products. Included were critical updates for the following:

• Cisco Identity Services Engine (ISE) – multiple versions
• Cisco ISE Passive Identity Connector (ISE-PIC) – multiple versions
• Cisco Webex Services (cloud-based, configured to use SSO integration with Control Hub)

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested recommendations, and apply the necessary updates when available.

• Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities
• Cisco Identity Services Engine Remote Code Execution Vulnerabilities
• Cisco Webex Services Certificate Validation Vulnerability
• Cisco Security Advisories