Serial number:AV26-430
Date: May 6, 2026

On May 6, 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were updates for the following:

• Cisco Crosswork Network Controller (CNC) – version 7.1 and prior
• Cisco IoT Field Network Director (FND) – version 4 and prior
• Cisco IoT Field Network Director (FND) – versions prior to 5.0.0-117
• Cisco Network Services Orchestrator (NSO) – version 6.3 and prior
• Cisco Network Services Orchestrator (NSO) – versions prior to 6.4.1.3
• Cisco SG350 and SG350X Managed Switch – multiple versions and models
• Cisco Unity Connection – versions prior to 12.5
• Cisco Unity Connection – versions prior to 14SU5
• Cisco Unity Connection – versions prior to 15SU4

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested recommendations, and apply the necessary updates when available.

• Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities
• Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vulnerability
• Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Connection Exhaustion Denial of Service Vulnerability
• Cisco IoT Field Network Director Vulnerabilities
• Cisco Security Advisories

Serial number:AV26-425
Date:May 6, 2026

On May 5, 2026, Palo Alto Networks published a security advisory to address critical vulnerabilities in the following products:

• PAN-OS 12.1 – versions prior to 12.1.4-h5
• PAN-OS 12.1 – versions prior to 12.1.7
• PAN-OS 11.2 – multiple versions
• PAN-OS 11.1 - multiple versions
• PAN-OS 10.2 – multiple versions

Palo Alto has received reports that CVE-2026-0300 is being actively exploited.

Update 1

On May 6, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-0300 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates, when available.

• CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
• Palo Alto Network Security Advisories
• CISA KEV: CVE-2026-0300

Serial number:AV26-429
Date: May 6, 2026

On May 6, 2026, Samsung published a security update to address vulnerabilities in the following product:

• Samsung mobile devices – versions prior to SMR-MAY-2026 Release 1

The most recent security update resolves multiple identified vulnerabilities.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary update.

• Samsung Security Updates

Serial number:AV26-428
Date: May 6, 2026

On May 6, 2026, WatchGuard published security advisories to address vulnerabilities in the following product:

• WatchGuard Agent on Windows – version 1.25.02.0000 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• (CVE-2026-6787 & CVE-2026-6788) WatchGuard Agent on Windows Local Privilege Escalation to SYSTEM via Chained Agent Service Vulnerabilities
• (CVE-2026-41288) WatchGuard Agent on Windows Privilege Escalation Vulnerability
• (CVE-2026-41286) Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B
• (CVE-2026-41287) Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A
• WatchGuard Security Advisories

Serial number:AV26-427
Date:May 6, 2026

On May 5, 2026, Broadcom published a security advisory to address vulnerabilities in the following product:

• Tanzu GemFire Management Console – versions prior to 1.4.4

The Cyber Centre encourages users and administrators to review the web links provided and apply the necessary updates.

• Product Release Advisory - VMware Tanzu GemFire Management Console 1.4.4
• Security Advisories - Application Networking and Security

Serial number:AV26-426
Date: May 6, 2026

On May 5, 2026, Google published a security advisory to address vulnerabilities in the following product:

• Stable Channel Chrome for Desktop – versions prior to 148.0.7778.96/97 (Windows/Mac) and 148.0.7778.96 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory