Security

Serial number:AV26-858
Date:August 28, 2026

As of August 27, 2026, PaperCut is affected by vulnerabilities in the following products:

• PaperCut MF
  • Prior to v24 Emergency Patch Release 2
  • Prior to v25 Emergency Patch Release 2
  • Prior to v26 Emergency Patch Release 2
• PaperCut NG
  • Prior to v24 Emergency Patch Release 2
  • Prior to v25 Emergency Patch Release 2
  • Prior to v26 Emergency Patch Release 2

Update 1

Open-source reporting indicates that CVE-2026-81578 and CVE-2026-82078 are related to PaperCut MF and PaperCut NG are being exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• URGENT Security Advisory: PaperCut NG/MF Security Bulletin (27 Aug 2026)

Serial Number:AV26-861
Date:August 28, 2026

As of August 27, 2026, cPanel is affected by vulnerabilities in the following products:

• cPanel & WebHost Manager (WHM) software
  • Prior to 11.110.0.141
  • Prior to 11.134.0.53
  • Prior to 11.136.0.37
  • Prior to 11.138.0.2
  • Prior to WP2: 11.138.1.7

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available

• Security: CVE-2026-65643 Vulnerability in cPanel’s Domain Parking Functionality - August 27, 2026
• cPanel Security

Serial Number:AV26-860
Date:August 28, 2026

As of August 27, 2026, Grafana is affected by a vulnerability in the following product:

• Alloy
  • Prior to or equal to 1.18.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Grafana: The open and composable observability platform | Grafana Labs
• CVE-2026-19516 CVE Record

Serial Number:AV26-859
Date:August 28, 2026

As of August 27, 2026, Redis is affected by a vulnerability in the following product:

• Redis
  • 8.0
  • All except 8.10.1
  • All except 8.2.9
  • All except 8.4.6
  • All except 8.6.6
  • All except 8.8.2

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Fix use-after-free in tlsProcessPendingData() pending-list iteration
• GitHub Releases

Serial number:AV26-857
Date:August 28, 2026

As of August 27, 2026, ServiceNow is affected by vulnerabilities in the following products:

• Xanadu
  • Versions prior to Patch 11 Hot Fix 7a
• Yokohama
  • Versions prior to Yokohama Patch 12 Hot Fix 3b
  • Versions prior to Yokohama Patch 13 Hot Fix 4
• Zurich
  • Multiple versions
• Australia
  • Multiple versions

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• August 2026 CVE Advisory Notification
• ServiceNow security advisories

Serial Number:AV26-856
Date:August 28, 2026

As of August 25, 2026, National Instruments is affected by vulnerabilities in the following product:

• LabVIEW
  • Prior to 23.0.0
  • Prior to 23.3.10
  • Prior to 24.3.7
  • Prior to 25.3.5
  • Prior to 26.3.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Memory Corruption Vulnerabilities in NI LabVIEW - NI
• Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW - NI
• Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW - NI
• Available Security Updates for NI Software: 2026 - NI