Serial Number:AV26-840
Date:August 21, 2026

As of August 18, 2026, Mozilla is affected by vulnerabilities in the following products:

• Firefox
  • versions prior to 154
• Firefox ESR
  • versions prior to 115.39
  • versions prior to 140.14
  • versions prior to 153.1
• Thunderbird
  • versions prior to 140.14
  • versions prior to 153.1
  • versions prior to 154

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Mozilla Foundation Security Advisories — Mozilla

Serial Number:AV26-839
Date:August 21, 2026

As of August 18, 2026, Apple is affected by vulnerabilities in the following products:

• Safari
  • Prior to 26.6.1
• iOS and iPadOS
  • Prior to 18.7.10
  • Prior to 26.6.1
• MacOS Tahoe
  • Prior to 26.6.2

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Apple security releases - Apple Support

Serial Number:AV26-838
Date:August 21, 2026

As of August 19, 2026, Splunk is affected by vulnerabilities in the following products:

• Cisco Talos Intelligence for Enterprise Security Cloud
  • Prior to 1.0.3
• Splunk Enterprise
  • Prior to 10.0.9
  • Prior to 10.2.6
  • Prior to 10.4.1
  • Prior to 10.4.2
  • Prior to 9.4.14
• Splunk MCP Server app
  • Prior to 1.2.1
• Splunk Universal Forwarder
  • Prior to 10.4.2
  • Prior to 10.2.6
  • Prior to 10.0.9
  • Prior to 9.4.14
• Splunk SOAR
  • Prior to 8.6.0
• Splunk SOAR Connectors
  • Multiple versions and models
• Splunk Enterprise Security
  • Prior to 8.6.1
• Splunk Apps and Add-ons
  • Multiple versions and models

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Splunk Security Advisories

Serial Number:AV26-837
Date:August 19, 2026

As of August 13, 2026, Johnson Controls is affected by vulnerabilities in the following products:

• Airwall
  • Prior to 4.1.0
• Metasys 12
  • all versions
• Metasys 13
  • all versions
• Metasys 14
  • all versions prior to v14.1.5
• Metasys 15
  • all versions prior to v15.0.1
• TL280
  • Prior to v5.62

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Johnson Controls - Product Security Advisories

Serial Number:AV26-836
Date:August 20, 2026

As of August 20, 2026, n8n is affected by vulnerabilities in the following product:

• n8n
  • Prior to 1.123.69
  • Prior to 2.33.4
  • Prior to 2.34.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• RCE in the n8n Main Process via Path Traversal in MCP Node-Schema Loading
• Snowflake Node Arbitrary File Read and Write via Client-Side Commands
• n8n Security

Serial Number:AV26-835
Date:August 20, 2026

As of August 19, 2026, TrueConf is affected by a vulnerability in the following product:

• TrueConf Server
  • 5.3.x versions prior to 5.3.9
  • 5.4.x versions prior to 5.4.9
  • 5.5.x versions prior to 5.5.5

On August 20, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-72529 and CVE-2026-72530 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• TrueConf Security Vulnerabilities, Fixes and Advisories
• CISA KEV: CVE-2026-72529
• CISA KEV: CVE-2026-72530