Serial Number: AV26-920
Date: September 14, 2026

As of September 8, 2026, Android published a security bulletin to address vulnerabilities affecting Android devices.

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Android Security Bulletin—September 2026

Serial number:AV26-919
Date:September 14, 2026

As of September 8, 2026, Samsung published a security update to address vulnerabilities in the following product:

• Samsung mobile devices – versions prior to SMR-SEP-2026

The most recent security update resolves multiple identified vulnerabilities. The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary update.

• Samsung Security Updates

Serial number:AV26-918
Date:September 14, 2026

As of September 11, 2026, MongoDB is affected by a vulnerability in the following product:

• MongoDB Server
  • Prior to 7.0.43
  • Prior to 8.0.32
  • Prior to 8.3.11
  • Prior to 9.1.0-rc0
  • Prior to 9.0.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Shred collection validator constants during parsing
• Alerts | MongoDB

Serial Number:AV26-917
Date:September 11, 2026

As of September 10, 2026, GitLab is affected by vulnerabilities in the following product:

• GitLab
  • Prior to 19.1.8
  • Prior to 19.2.6
  • Prior to 19.3.2

On September 11, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-85706 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8 | GitLab Docs
• GitLab release notes | GitLab Docs
• CISA KEV: CVE-2026-85706

Serial number:AV26-867
Date:September 1, 2026
Updated:September 11, 2026

As of August 28, 2026, JFrog is affected by a vulnerability in the following product:

• Artifactory
  • Prior to 7.111.21
  • Prior to 7.117.28
  • Prior to 7.125.20
  • Prior to 7.133.29
  • Prior to 7.146.38
  • Prior to 7.161.20

Open-source reporting indicates that CVE-2026-82329 related to JFrog Artifactory is being exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

Update 1

On September 2, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-82329 to their Known Exploited Vulnerabilities (KEV) Database.

Update 2

On September 11, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-42016 and CVE-2026-42018 to their Known Exploited Vulnerabilities (KEV) Database.

• Artifactory Self-Managed Releases
• JFrog Security Advisories
• CISA KEV: CVE-2026-82329
• CISA KEV: CVE-2026-42016
• CISA KEV: CVE-2026-42018

Serial Number:AV26-916
Date:September 11, 2026

As of September 8, 2026, n8n is affected by a vulnerability in the following product:

• n8n
  • Prior to 2.37.7
  • Prior to 2.38.2
  • Prior to 1.123.76

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Release n8n@1.123.76
• Release n8n@2.37.7
• Release n8n@2.38.2
• Overview - n8n-io/n8n - GitHub