Serial Number:AV26-755
Date:July 28, 2026

As of July 27, 2026, Progress Software is affected by vulnerabilities in the following products:

• ECS Connection Manager
  • Prior to 7.2.63.3
• LoadMaster
  • Prior to 7.2.54.19
  • Prior to 7.2.63.3
• MOVEit WAF
  • Prior to 7.2.63.3
• Multi Tenant
  • Prior to 7.1.35.16
• Object Scale Connection Manager
  • Prior to 7.2.63.3

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Progress Customer Community

Serial Number: AV26-754
Date: July 28, 2026

As of July 27, 2026, Vercel is affected by vulnerabilities in the following product:

• next.js
  • Prior to 15.5.21
  • Prior to 16.2.11

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Release v15.5.21
• Release v16.2.11

Serial Number: AV26-753
Date: July 28, 2026

As of July 27, 2026, Apple is affected by vulnerabilities in the following products:

• iOS and iPadOS
  • Prior to 26.6
• macOS
  • Prior to 14.8.8
  • Prior to 15.7.8
  • Prior to 26.6
• tvOS
  • Prior to 26.6
• visionOS
  • Prior to 26.6
• Safari
  • Prior to 26.6
• watchOS
  • Prior to 26.6

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Apple security releases - Apple Support

Serial Number: AV26-752
Date: July 28, 2026

As of July 27, 2026, JetBrains is affected by a vulnerability in the following product:

• TeamCity
  • Prior to 2026.1.3, 2025.11.7

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Fixed security issues
• Security - The JetBrains Blog

Serial Number:AV26-751
Date:July 28, 2026

As of July 27, 2026, Arista Networks is affected by vulnerabilities in the following product:

• VeloCloud Orchestrator On-Prem
  • from 5.2.0 to versions prior to 5.2.3.14
  • from 6.1.0 to versions prior to 6.1.3.4
  • from 6.4.0 to versions prior to 6.4.2.4
  • from 7.0.0 to versions prior to 7.0.0.1

On July 27, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-16812 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Security Advisory 0144
• Security Advisory 0145
• CISA KEV: CVE-2026-16812

Serial Number:AV26-749
Date:July 28, 2026

As of July 27, 2026, Apache is affected by vulnerabilities in the following product:

• Apache Thrift
  • Prior to 0.24.0

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• CVE-2026-48586: Apache Thrift: TZlibTransport Decompression Size Limit
• CVE-2026-49158: Apache Thrift: Ruby THeaderTransport ZLIB Decompression Bomb
• CVE-2026-55969: Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()
• CVE-2026-58023: Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path