Serial number:AV26-1102
Date:October 29, 2026

As of October 28, 2026, Cisco is affected by a vulnerability in the following products:

• Cisco Secure Firewall Adaptive Security Appliance (ASA)
  • Versions prior to 9.16.4.104, 9.18.4.96, 9.20.4.50, 9.22.3.200, 9.23.1.4, 9.24.1.27 and 9.24.10.1
• Cisco Secure Firewall Threat Defense (FTD)
  • Versions prior to 7.0.11, 7.2.13, 7.4.9, 7.6.7, 7.7.14, 10.0.3 and 10.1.1
• Cisco Network Management and Provisioning License (Smart Software Manager) On-Prem
  • Versions prior to 10-202610

Cisco indicates that CVE-2026-76418 is exploited in the wild.

Update 1
On October 29, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-76418 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
• Vulnerabilities in Node.js Affecting Cisco Products: October 2026
• Cisco Security Advisories
• CISA KEV: CVE-2026-76418

Serial number:AV26-1028
Date:October 13, 2026
Updated:October 29, 2026

As of October 12, 2026, GitLab is affected by vulnerabilities in the following product:

• GitLab
  • Prior to 19.2.8
  • Prior to 19.3.5
  • Prior to 19.4.2

Update 1
On October 29, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-97229 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8
• GitLab release notes | GitLab Docs
• CISA KEV: CVE-2026-97229

Serial number:AV26-1104
Date:October 29, 2026

As of October 28, 2026, Mattermost is affected by a vulnerability in the following product:

• Mattermost
  • Prior to or equal to 11.10.0
  • Prior to or equal to 11.9.2
  • Prior to or equal to 11.8.6
  • Prior to or equal to 11.7.11

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Mattermost Security Updates

Serial number:AV26-1103
Date:October 29, 2026

As of October 28, 2026, n8n is affected by vulnerabilities in the following product:

• n8n
  • Prior to 2.44.1
  • Prior to 2.43.5

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Crafted Workflow ID Gives Access to Data Tables in Other Projects
• Overview - n8n-io/n8n

Serial number:AV26-763
Date:July 30, 2026
Updated: October 28, 2026

As of July 30, 2026, VMware is affected by vulnerabilities in the following products:

• Cloud Foundation
  • 5.x
  • 9.0.x.x
  • 9.1.x.x
  • Prior to 5.2.3
• ESX
  • Prior to ESXi-9.0.2.0100-25595025
  • Prior to ESXi-9.1.0.0-25370933
  • Prior to ESXi-9.1.0.0200-25557999
  • Prior to ESXi80U3i-25205845
  • Prior to ESXi80U3k-25595708
• Fusion
  • Prior to 26H1
• Telco Cloud Infrastructure
  • 3.0
• Telco Cloud Platform
  • 4.x
  • 5.0.x
  • 5.1.x
• Workstation
  • Prior to 26H1
• vCenter
  • Prior to 8.0 U3k
  • Prior to 9.0.2.0100
  • Prior to 9.1.0.0300
• vSphere Foundation
  • 9.0.x.x
  • 9.1.x.x

Update 2

On October 28, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709 to their Known Exploited Vulnerabilities (KEV) Database.

Update 1

On August 18, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-59310 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• VMSA-2026-0006: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)
• Security Advisories - VMware Cloud Foundation
• CISA KEV: CVE-2026-59310
• CISA KEV: CVE-2026-41709

Serial number:AV26-1101
Date:October 28, 2026

As of October 28, 2026, Juniper Networks is affected by vulnerabilities in the following products:

• Session Smart Conductor
  • Prior to 7.0.5
  • Prior to 7.1.7
  • Prior to 7.2.3
• Session Smart Router
  • Prior to 7.0.5
  • Prior to 7.1.7
  • Prior to 7.2.3

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• 2026-10 On-Demand Security Bulletin: Session Smart Router and Session Smart Conductor: Multiple internally discovered vulnerabilities resolved
• CEC Juniper Community