Serial number:AV26-496
Date:May 21, 2026

On May 21, 2026, ConnectWise published a security advisory to address a vulnerability in the following product:

• ConnectWise Automate – versions prior to 2026.5

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• ConnectWise Automat 2026.5 Security Update
• ConnectWise - Security Bulletins

Serial number:AV26-495
Date:May 21, 2026

On May 20, 2026, FreeBSD published security advisories to address vulnerabilities in the following product:

• FreeBSD – all supported versions

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• FreeBSD Security Advisories

Serial number:AV26-494
Date:May 21, 2026

On May 21, 2026, Trend Micro published a security advisory to address vulnerabilities in the following products:

• Apex One (on-premise) – server/agent builds prior to 2019 (on-prem) build 17079
• Apex One as a service – SaaS
• Trend Vision One Endpoint - SEP – agent builds prior to 14.0.20731

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• ITW SECURITY BULLETIN: Apex One and Vision One – Standard Endpoint Protection (SEP) May 2026 Security Bulletin
• Trend Micro Business Success Vulnerability Response

Serial number:AV26-493
Date:May 20, 2026

On May 20, 2026, Splunk published security advisories to address vulnerabilities in the following products. Included were critical updates for the following:

• Splunk User Behavior Analytics – versions prior to 5.4.5
• Splunk AppDynamics Machine Agent – versions prior to 26.4.0
• Splunk AppDynamics Java Agent – versions prior to 26.4.0
• Splunk AppDynamics Private Synthetic Agent – versions prior to 26.4.0
• Splunk AppDynamics Python Agent – versions prior to 26.4.1
• Splunk AppDynamics Cluster Agent – versions prior to 26.4.0
• Splunk AppDynamics Database Agent – versions prior to 26.4.0
• Splunk AppDynamics Analytics Agent – versions prior to 26.4.0
• Splunk AppDynamics Apache Web Server Agent – versions prior to 25.11.1
• Splunk Universal Forwarder – versions 9.4.0 to 9.4.10
• Splunk Enterprise – multiple versions and platforms
• Splunk Cloud Platform – multiple versions and platforms
• Splunk AI Toolkit – versions prior to 5.7.3

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Splunk Security Advisories

Serial number:AV26-492
Date: May 20, 2026

On May 20, 2026, Drupal published a security advisory to address a critical vulnerability in the following product:

• Drupal Core – multiple versions

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates or perform the suggested mitigations.

• Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
• Drupal Security Advisories

Serial number:AV26-491
Date: May 20, 2026

On May 20, 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included was a critical update for the following:

• Cisco Secure Workload – version 3.9 and prior
• Cisco Secure Workload – versions prior to 3.10.8.3
• Cisco Secure Workload – versions prior to 4.0.3.17

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Cisco Secure Workload Unauthorized API Access Vulnerability
• Cisco Security Advisories