Serial number:AV25-613
Date:September 23, 2025
Updated:March 9, 2026

On September 17, 2025, SolarWinds published a security advisory to address critical vulnerabilities in the following product:

• SolarWinds Web Help Desk – version 12.8.7 and prior

Update 1

On March 9, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-26399 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• SolarWinds Web Help Desk AjaxProxy Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2025-26399)
• SolarWinds Security Vulnerabilities
• CISA KEV: CVE-2025-26399

Serial number:AV26-113
Date:February 10, 2026
Updated:March 9, 2026

On February 9, 2026, Ivanti published a security advisory to address vulnerabilities in the following product:

• Ivanti Endpoint Manager (EPM) – version 2024 SU4 SR1 and prior

Update 1

On March 9, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-1603 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the web links provided and apply the necessary updates.

• Security Advisory EPM February 2026 for EPM 2024
• Ivanti Security Advisories
• CISA KEV: CVE-2026-1603

Serial number:AV26-207
Date:March 9, 2026

On March 2, 2026, Mozilla published a security advisory to address a vulnerability in the following product:

• Focus for iOS – versions prior to 148.2

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Mozilla Foundation Security Advisory 2026-18
• Mozilla Security Advisories

Serial number:AV26-206
Date:March 9, 2026

On March 6, 2026, Microsoft published a security update to address vulnerabilities in the following product:

• Microsoft Edge Stable Channel – versions prior to 145.0.3800.97

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary update.

• Microsoft Edge Stable Channel Release Notes

Serial number:AV26-205

Date:March 9, 2026

On March 9, 2026, Moxa published a security advisory to address vulnerabilities in the following products:

• DA Series – all BIOS versions
• DA-682C Series – version BIOS v1.5 and prior
• DA-820C Series – version BIOS v1.2 and earlier

The Cyber Centre encourages users and administrators to review the web links provided and apply the necessary updates.

• Security Enhancement: Intel® BIOS Firmware DoS (INTEL-SA-00813)
• Security Enhancement: Intel® Converged Security Management Engine (CSME) Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00391)
• Security Enhancement: Intel® Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00709)
• Moxa Security Advisories

Serial number:AV26-204
Date:March 9, 2026

Between March 2 and 8, 2026, CISA published ICS advisories to address vulnerabilities in the following products:

• Delta Electronics CNCSoft-G2 – versions prior to V2.1.0.39
• ePower epower.ie – all versions
• Everon OCPP Backends api.everon.io – all versions
• Hitachi Energy Relion REB500 Product – version 8.3.3.0 and prior
• Hitachi Energy RTU500 Product – multiple versions
• Labkotec LID-3300IP – all versions
• Mitsubishi Electric MELSEC iQ-F FX5-ENET/IP Ethernet Module FX5-ENET/IP – version 1.106 and prior
• Mitsubishi Electric MELSEC iQ-F FX5-EIP EtherNet/IP Module FX5-EIP – all versions
• Mobiliti e-mobi.hu – all versions
• Portwell Engineering Toolkits – version 4.8.2

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

• CISA ICS Advisories