Serial number:AV26-673
Date:July 8, 2026

On July 7, 2026, Tanium published a security advisory to address a vulnerability in the following products:

• Tanium Server 2025H1 Release – versions prior to Update MR21 (v7.7.3.8298)
• Tanium Server 2025H2 Release – versions prior to Update MR11 (v7.8.2.1198)
• Tanium Server 2026H1 Release – versions prior to Update MR3 (v7.8.4.1327)

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Tanium Security Advisories - TAN-2026-016
• Tanium Security Advisories

Serial number:AV26-672
Date:July 8, 2026

On July 8, 2026, n8n published security advisories to address vulnerabilities in the following product:

• n8n – versions prior to 1.123.64
• n8n – versions prior to 2.30.1
• n8n – versions prior to 2.29.8

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary update.

• n8n Security

Serial number:AV26-671
Date:July 8, 2026

On July 2, 2026, Ubiquiti published a security advisory to address critical vulnerabilities in the following products:

• EF-Core – version 5.1.18 and prior
• EFG – version 5.1.15 and prior
• ENVR – version 5.1.15 and prior
• ENVR-Core – version 5.1.15 and prior
• Express 7 – version 5.1.15 and prior
• UCG-Fiber – version 5.1.15 and prior
• UCG-Industrial – version 5.1.15 and prior
• UCG-Max – version 5.1.15 and prior
• UCG-Ultra – version 5.1.15 and prior
• UCK – version 5.1.15 and prior
• UCK-Enterprise – version 5.1.15 and prior
• UCKP – version 5.1.15 and prior
• UDM – version 5.1.15 and prior
• UDM-Beast – version 5.1.15 and prior
• UDM-Pro – version 5.1.15 and prior
• UDM-Pro – version 5.1.15 and prior
• UDM-Pro-Max – version 5.1.15 and prior
• UDM-SE – version 5.1.15 and prior
• UDR – version 5.1.15 and prior
• UDR-5G – version 5.1.15 and prior
• UDR7 – version 5.1.15 and prior
• UDW – version 5.1.15 and prior
• UNAS-2 – version 5.1.16 and prior
• UNAS-4 – version 5.1.16 and prior
• UNAS-Pro – version 5.1.16 and prior
• UNAS-Pro-4 – version 5.1.16 and prior
• UNAS-Pro-8 – version 5.1.16 and prior
• UniFi Access Application – version 4.2.28 and prior
• UniFi Network Application – version 10.3.58 and prior
• UniFi OS Server – version 5.1.15 and prior
• UniFi Protect Application – version 7.1.77 and prior
• UniFi Protect Floodlight – version 1.13.4 and prior
• UniFi Talk Application – version 5.1.2 and prior
• UNVR – version 5.1.15 and prior
• UNVR-G2 – version 5.1.15 and prior
• UNVR-G2-Pro – version 5.1.15 and prior
• UNVR-Instant – version 5.1.15 and prior
• UNVR-Pro – version 5.1.15 and prior

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Ubiquiti UniFi - Security Advisory Bulletin 066

Serial number:AV26-670
Date:July 8, 2026

On July 7, 2026, Langflow updated a security advisory to address vulnerabilities in the following product:

• Langflow – versions prior to 1.9.1

On July 7, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-55255 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates, when available.

• CVE-2026-55255: Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow
• CISA KEV: CVE-2026-55255

Serial number: AV26–647
Date: July 2, 2026
Updated: July 7, 2026

On June 30, 2026, Adobe published security advisories to address critical vulnerabilities in the following products:

• Adobe ColdFusion 2025 – Update 9 and prior
• Adobe ColdFusion 2023 – Update 20 and prior
• Adobe Campaign Classic – version ACC v7: 7.4.3 build 9396 and prior

Update 1

Open-source reporting indicates that CVE-2026-48282 is being exploited.

Update 2

On July 7, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-48282 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Security update available for Adobe ColdFusion | APSB26-68
• Security updates available for Adobe Campaign Classic | APSB26-69
• Adobe Security Advisories
• CISA KEV: CVE-2026-48282

Serial number: AV26-669
Date: July 7, 2026

On July 7, 2026, Google published a security advisory to address vulnerabilities in the following product:

• Stable Channel Chrome for Desktop – versions prior to0.7871.100/101 (Windows/Mac), and 150.0.7871.100 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory