Serial number:AV26-199
Date:March 5, 2026

On February 27, 2026, OpenText published a security advisory to address a vulnerability in the following product:

• Filr – versions up to 25.1.2

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Improper access control vulnerability has been discovered in OpenText Filr - (CVE-2026-3266)

Serial number:AV26-198
Date:March 4, 2026

On March 4, 2026, Drupal published security advisories to address vulnerabilities in the following products:

• File Access Fix (deprecated) – versions prior to 1.2.0
• AJAX Dashboard – versions prior to 3.1.0
• Calculation Fields – versions prior to 1.0.4
• Google Analytics GA4 – versions prior to 1.1.13

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates or perform the suggested mitigations.

• File Access Fix (deprecated) - Moderately critical - Access bypass - SA-CONTRIB-2026-021
• AJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022
• Calculation Fields - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-023
• Google Analytics GA4 - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-024
• Drupal Security Advisories

Serial number:AV26-197
Date:March 5, 2026

On March 4, 2026, Cisco published security advisories to address vulnerabilities in the following products. Included were critical updates for the following:

• Cisco Security Cloud Control (SCC) Firewall Management – all versions
• Cisco Secure Firewall Management Center (FMC) – all versions
• Cisco Secure Firewall Adaptive Security Appliance (ASA) – versions prior to 9.20.4.14
• Cisco Secure Firewall Threat Defense (FTD) – all versions

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested recommendations, and apply the necessary updates when available.

• Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability
• Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
• Cisco Secure Firewall Adaptive Security Appliance Software TCP Flood Denial of Service Vulnerability
• Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IPsec Denial of Service Vulnerability
• Cisco Security Advisories

Serial number:AV26-196
Date:March 4, 2026

On March 4, 2026, HPE published a security advisory to address vulnerabilities in the following product:

• HPE Aruba Networking – multiple versions and models

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• HPESBNW05026 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking Wireless Operating Systems (AOS-8 and AOS-10) for Mobility Conductors, Controllers, Gateways, and Access Points.
• HPE Security Bulletin Library

Serial number:AV26-195
Date:March 4, 2026

On March 3, 2026, Tenable published a security advisory to address a vulnerability in the following product:

• Nessus Manager – version 10.10.2 and prior
• Nessus Manager – versions 10.11.0 to 10.11.2

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• [R1] Nessus Manager Versions 10.10.3 and 10.11.3 Fix One Vulnerability
• Tenable Product Security Advisories

Serial number:AV26-194
Date:March 4, 2026

On March 3, 2026, Google published a security advisory to address vulnerabilities in the following product:

• Stable Channel Chrome for Desktop – versions prior to 145.0.7632.159/160 (Windows/Mac) and 145.0.7632.159 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory