Serial number:AV26-508
Date: May 25, 2026                               

On May 22, 2026, cPanel published a security advisory to address a vulnerability in the following products:

• ea-nginx – version v1.31.0
• ea-nginx-passenger – version v6.1.2

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Security: CVE-2026-9256 ea-nginx v1.31.1 Security Release - May 22, 2026
• cPanel Security

Serial number:AV26-507
Date:May 25, 2026

Between May 18 and 24, 2026, Red Hat published security advisories to address vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder – multiple versions and platforms
• Red Hat Enterprise Linux – multiple versions and platforms
• Red Hat Enterprise Linux Server – multiple versions and platforms
• Red Hat Enterprise Linux for Real Time – multiple versions and platforms

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Red Hat Security Advisories

Serial number:AV26–506
Date:May 25, 2026

[Control systems] CISA ICS security advisories (AV26–506)

Between May 18 and 24, 2026, CISA published ICS advisories to address vulnerabilities in the following products:

• ABB B&R Automation Runtime – versions prior to 6.4
• ABB B&R Automation Studio – versions prior to 6.5
• ABB B&R PCs – multiple versions and models
• ABB CoreSense HM – version 2.3.1 and prior
• ABB CoreSense M10 – version 1.4.1.12 and prior
• ABB Terra AC Wallbox (JP) – versions 1.8.33 and prior
• Abb B&R Automation Studio – versions prior to 6.5
• Hitachi Energy GMS600 – versions 1.3.0 to 1.3.1
• Kieback & Peter DDC Building Controllers – multiple versions and models
• ScadaBR – version 1.2.0
• Siemens RUGGEDCOM APE1808 – all versions
• ZKTeco CCTV Cameras – firmware version prior to V5.0.1.2.20260421

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

• CISA ICS Advisories

Serial number:AV26-505
Date: May 25, 2026

Between May 18 and 24, 2026, Ubuntu published security notices to address vulnerabilities in the Linux kernel affecting the following products:

• Ubuntu 14.04 LTS
• Ubuntu 16.04 LTS
• Ubuntu 18.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 22.04 LTS
• Ubuntu 24.04 LTS
• Ubuntu 25.10

The Cyber Centre encourages users and administrators to review the web link provided and apply the necessary updates.

• Ubuntu Security Notices

Serial number:AV26-504
Date: May 25, 2026 

Between May 18 and 24, 2026, Dell published security advisories to address vulnerabilities in multiple products:

• Dell Networking OS10 – versions prior to 10.5.6.13
• SmartFabric Storage Software – versions prior to 1.4.5
• Dell Container Storage Modules – versions 1.6.0 to 1.16.3
• Dell Container Storage Modules – versions 1.11.0 to 1.16.3

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• DSA-2026-161: Security Update for Dell Networking OS10 Vulnerabilities
• DSA-2026-235: Security Update for Dell Networking SmartFabric Storage Software Vulnerabilities
• DSA-2026-234: Security Update for Dell Container Storage Modules Hard-coded Credentials Vulnerability
• Dell Security advisories and notices

Serial number:AV26-503
Date: May 25, 2026

On May 24, 2026, Roundcube published security advisories to address vulnerabilities in the following product: 

• Roundcube Webmail – versions prior to 1.6.16
• Roundcube Webmail – versions prior to 1.7.1

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Roundcube Webmail 1.6.16
• Roundcube Webmail 1.71
• Roundcube Open Source Webmail Software