FREE DIAGNOSTIC

Serial number:AV26-397
Date:April 27, 2026

On April 27, 2026, Spring published security advisories to address vulnerabilities in the following product:

• Spring AI – 1.0.x versions prior to 1.0.6
• Spring AI – 1.1.x versions prior to 1.1.5

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• CVE-2026-40967: VectorStore FilterExpression Converter injection
• CVE-2026-40978: SQL Injection in CosmosDBVectorStore.doDelete()
• Spring Security Advisories

Serial number:AV26-396
Date: April 27, 2026

On April 24, 2026, Microsoft published a security update to address vulnerabilities in the following product:

• Microsoft Edge Stable Channel – versions prior to 147.0.3912.86

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary update.

• Microsoft Edge Stable Channel Release Notes

Serial number:AV26-395
Date: April 27, 2026

On April 26, 2026, Notepad++ published a security advisory to address a critical vulnerability in the following product:

• Notepad++ – version 8.9.3 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Notepad++ release 8.9.4
• Notepad++ community

Serial number:AV26-394
Date:April 27, 2026

On April 24, 2026, Broadcom published a security advisory to address critical vulnerabilities in the following products:

• VMware Tanzu Data Lake – versions prior to 4.0.0
• VMware Tanzu Greenplum Platform Extension Framework – versions prior to 8.0.0

The Cyber Centre encourages users and administrators to review the web links provided and apply the necessary updates.

• Product Release Advisory - VMware Tanzu Data Lake 4.0.0
• Product Release Advisory - VMware Tanzu Greenplum Platform Extension Framework 8.0.0
• Security Advisories – Tanzu

Serial number:AV26-393
Date:April27, 2026

On April 27, 2026, Moxa published a security advisory to address vulnerabilities in the following products:

• TN-4900 Series – firmware version v3.22 and prior
• EDR-8010 Series – firmware version v3.23 and prior
• EDR-G9010 Series – firmware version v3.23.1 and prior
• OnCell G4302-LTE4 Series - firmware version v3.23.0 and prior
• OnCell G4308-LTE4 Series – firmware version v3.23.0 and prior
• EDF-G1002-BP Series – firmware version v3.23 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. 

• CVE-2026-3867, CVE-2026-3868: Improper Ownership Management and Improper Handling of Length Parameter Inconsistency Vulnerabilities in Secure Router
• Moxa Security Advisories

Serial number:AV26-392
Date:April 27, 2026

Between April 20 and 26, 2026, Red Hat published security advisories to address vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder – multiple versions and platforms
• Red Hat Enterprise Linux – multiple versions and platforms
• Red Hat Enterprise Linux Server – multiple versions and platforms
• Red Hat Enterprise Linux for Real Time – multiple versions and platforms

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Red Hat Security Advisories