Serial number:AV26-124
Date:February 12, 2026

On February 10, 2026, AMD published security advisories to address vulnerabilities in the following products:

• AMD Athlon and AMD Ryzen Processors – multiple models and versions
• AMD Graphic Drivers – multiple models and versions
• AMD µProf performance analysis tool-suite – versions prior to 5.2.431
• AMD Vivado Design Suite installation – versions prior to 2025.2
• AMD Documentation Navigator installation – tool being retired
• AMD EPYC and AMD EPYC Embedded Series Processors – multiple models and versions

The Cyber Centre encourages users and administrators to review the web link provided and apply the necessary updates.

• AMD Product Security

Serial number:AV26-123
Date:February 12, 2026

On February 11, 2026, Hashicorp published a security advisory to address a vulnerability in the following product:

• next-mdx-remote – versions 4.3.0 to 5.0.0

The Cyber Centre encourages users and administrators to review the web link provided and apply the necessary updates.

• HCSEC-2026-01 - Arbitrary code execution in React server-side rendering of untrusted MDX content

Serial number:AV26-122
Date:February 11, 2026

On February 11, 2026, Apple published security updates to address vulnerabilities in the following products:

• iOS – versions prior to 26.3
• iPadOS – versions prior to 26.3
• iOS – versions prior to 18.7.5
• iPadOS – versions prior to 18.7.5
• macOS Tahoe – versions prior to 26.3
• macOS Sequoia – versions prior to 15.7.4
• macOS Sonoma – versions prior to 14.8.4
• tvOS – versions prior to 26.3
• watchOS – versions prior to 26.3
• visionOS – versions prior to 26.3

Apple has indicated that CVE-2026-20700 may have been exploited.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Apple Security Updates

Serial number:AV26-121
Date:February 11, 2026

On February 11, 2026, Drupal published security advisories to address vulnerabilities in the following products:

• QuickEdit – versions prior to 1.0.5 and versions 2.0.0 to versions prior to 2.0.1
• UI Icons – versions prior to 1.0.1 and version 1.1.0 to versions prior to 1.1.1

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates or perform the suggested mitigations.

• Quick Edit - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-009
• UI Icons - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-010
• Drupal Security Advisories

Serial number:AV26-120
Date:February 11, 2026

On February 10, 2026, Commvault published security advisories to address vulnerabilities in the following products:

• Commvault Windows – versions 11.32.0 to 11.32.128
• Commvault Windows – versions 11.36.0 to 11.36.89
• Commvault Windows – versions 11.40.0 to 11.40.136

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• CV_2026_02_1: MongoBleed: MongoDB Memory Disclosure Vulnerability (CVE-2025-14847)
• Commvault Security Advisories

Serial number:AV26-119
Date:February 11, 2026

On February 10, 2026, Schneider Electric published advisories to address vulnerabilities in the following products:

• EcoStruxure Building Operation Workstation and WebStation – 7.0.x versions prior to 7.0.3.2000 (CP1)
• EcoStruxure Building Operation Workstation and WebStation – 6.x versions prior to 6.0.4.14001 (CP10)
• SCADAPack 47x/47xi – versions prior to R3.4.2 (Firmware version prior to 9.12.2)
• SCADAPack 57x – all versions
• RemoteConnect – versions prior to R3.4.2

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• Multiple Vulnerabilities on EcoStruxure Building Operation Workstation and EcoStruxureTM Building Operation Webstation
• Improper Check for Unusual or Exceptional Conditions on Multiple Products
• Schneider Electric Security Notifications