Virus Removal

Serial number:AV26–324
Date:April 7, 2026

Between March 30 and April 5, 2026, CISA published ICS advisories to address vulnerabilities in the following products:

• Anritsu Remote Spectrum Monitor MS27100 – all versions
• Anritsu Remote Spectrum Monitor MS27101A – all versions
• Anritsu Remote Spectrum Monitor MS27102A – all versions
• Anritsu Remote Spectrum Monitor MS27103A – all versions
• Hitachi Energy Ellipse – version 9.0.50 and prior
• PX4 Autopilot – v1.16.0_SITL_latest_stable (CVE-2026-1579)
• Siemens CPCI85 Central Processing/Communication RTUM85 RTU Base – versions prior to V26.10
• Siemens CPCI85 Central Processing/Communication SICORE Base system – versions prior to V26.10
• Yokogawa CENTUM VP – multiple versions

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

• CISA ICS Advisories

Serial number:AV26-323
Date:April 7, 2026

On April 7, 2026, Mozilla published security advisories to address vulnerabilities in the following products:

• Firefox – versions prior to 149.0.2
• Firefox ESR – versions prior to 34.1
• Firefox ESR – versions prior to 9.1

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Security Vulnerabilities fixed in Firefox ESR 140.9.1
• Security Vulnerabilities fixed in Firefox ESR 115.34.1
• Security Vulnerabilities fixed in Firefox 149.0.2
• Mozilla Security Advisories

Serial number: AV26-322
Date: April 7, 2026

Between March 30 and April 5, 2026, Dell published security advisories to address vulnerabilities in multiple products:

• Dell Networking OS10 – versions prior to 10.6.11
• Connectrix Switches and Directors – versions prior to sannav_ova_9x_os_02_2026
• Elastic Cloud Storage – versions prior to 3.8.1.7
• ObjectScale - versions prior to 4.1.0.3 and 4.2.00
• Dell Data Protection Central – versions 19.9 to 19.12 with Data Protection Central OS Update prior to dpc-osupdate-1.1.26-1
• Dell PowerProtect DP Series Appliance – versions prior to 2.7.9 with Data Protection Central OS Update prior to dpc-osupdate-1.1.26-1
• Dell PowerProtect Data Manager – versions prior to 20.1.0.0
• Dell AppSync – versions prior to 4.6.0.4
• Dell APEX Cloud Platform for Microsoft Azure – versions prior to 01.07.01.00
• Unisphere for PowerMax Virtual Appliance – versions prior to 9.2.4.20
• Solutions Enabler – versions prior to 10.3.0.1 and 9.2.4.9
• Solutions Enabler Virtual Appliance – versions prior to 9.2.4.9
• Dell PowerMax EEM 5978 – versions prior to 5978.720.720.11249
• Dell PowerMax EEM 10.3.1.0 – versions prior to 10.3.1.0 patch 11248
• Dell PowerMaxOS 5978 – versions prior to 5978.720.720.11249
• Dell PowerMaxOS 10.3.0.1 – versions prior to 10.3.0.1 patch 11248
• PowerSwitch Z9664F-ON – versions prior to 3.54.5.1-11

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Dell Security advisories and notices

Serial number:AV26-321
Date:April 7, 2026

On April 7, 2026, Hitachi published security advisories to address vulnerabilities in the following products:

• Hitachi Ops Center Common Services (Japanese version) – versions prior to 11.0.8-00
• Hitachi Ops Center Common Services (English version) – versions prior to 11.0.8-00
• Hitachi Ops Center Viewpoint (Japanese version) – versions 11.0.2-00 to versions prior to 11.0.8-00
• Hitachi Ops Center Viewpoint data center proxy (Japanese version) – versions 11.0.2-00 to versions prior to 11.0.8-00
• JP1/IT Desktop Management (Manager) – multiple versions
• Job Management Partner 1/IT Desktop Management (Manager) – multiple versions
• JP1/IT Desktop Management 2 (Manager) – multiple versions
• JP1/IT Desktop Management 2 (Operations Director) – multiple versions
• Job Management Partner 1/IT Desktop Management 2 (Manager) – versions 10-50 to 10-50-11
• JP1/NETM/DM (Manager) – multiple versions
• JP1/NETM/DM (Client) – multiple versions
• Job Management Partner 1/Software Distribution (Manager) – multiple versions
• Job Management Partner 1/Software Distribution (Client) – multiple versions

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• Multiple Vulnerabilities in JP1/IT Desktop Management 2 and JP1/NETM/DM
• Multiple Vulnerabilities in Hitachi Ops Center Common Services
• Multiple Vulnerabilities in Hitachi Ops Center Viewpoint
• Hitachi Vulnerability Information

Serial number:AV26-320
Date:April 7, 2026

On April 7, 2026, Erlang published a security advisory to address a vulnerability in the following products:

• inets (OTP) – versions prior to 9.1.0.6, 9.3.2.4 and 9.6.2
• OTP – versions prior to 28.4.2, 27.3.4.10, and 26.2.5.19
• Public_key (OTP) – versions prior to 1.17.1.2 and 1.20.3
• ssl (OTP) – versions prior to 11.2.12.7 and 11.5.4

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• OCSP designated-responder authorization bypass — missing signature verification (RFC 6960 §4.2.2.2)
• ScriptAlias CGI targets bypass `directory` auth (mod_auth vs mod_cgi path mismatch)
• Erlang Security

Serial number: AV26-319
Date: April 7, 2026

On April 2, 2026, VMware published a security advisory to address critical vulnerabilities in the following products:

• VMware Tanzu Data Intelligence – versions prior to MySQL for Kubernetes 2.0.2
• VMware Tanzu Data Services – versions prior to MySQL for Kubernetes 2.0.2
• VMware Tanzu Data Services Pack – versions prior to MySQL for Kubernetes 2.0.2
• VMware Tanzu Data Services Solutions – versions prior to MySQL for Kubernetes 2.0.2
• VMware Tanzu Data Suite – versions prior to MySQL for Kubernetes 2.0.2
• VMware Tanzu for MySQL – versions prior to MySQL for Kubernetes 2.0.2
• VMware Tanzu Platform – versions prior to MySQL for Kubernetes 2.0.2
• Vmware Tanzu Platform SM – versions prior to MySQL for Kubernetes 2.0.2
• VMware Tanzu SQL – versions prior to MySQL for Kubernetes 2.0.2

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Product Release Advisory - VMware Tanzu for MySQL on Kubernetes 2.0.2
• Security Advisories – Tanzu