Serial number:AV26-244
Date:March 17, 2026

Between March 16 and 17, 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Telco Service Orchestrator – versions prior to v4.2.12
• HPE Brocade Fabric OS – versions prior to 9.2.1c3 and 9.2.2c
• HPE SANnav Management Software – versions prior to v2.4.0b

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• HPESBNW05029 rev.1 - HPE Telco Service Orchestrator, Remote Buffer Overflow
• HPESBST05001 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS), Multiple Vulnerabilities
• HPESBST05000 rev.1 - HPE B-Series SANnav Management Portal, Multiple Vulnerabilities
• HPE Security Bulletin Library

Serial number:AV25-391
Date: July 3, 2025
Updated: March 16, 2026

On May 14, 2025, Wing FTP a published an update to address a critical vulnerability in the following product:

• Wing FTP Server – version v7.4.3 and prior

Open-source reporting has indicated that proof-of-concept exploit code is available for CVE-2025-47812.

Update 1

On July 10, 2025, open-source reporting indicated that the Wing FTP Remote Code Execution vulnerability CVE-2025-47812 has been actively exploited in the wild. The vulnerability is rated a CVSS 10.0.

Update 2

On March 16, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-47813 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Wing FTP Server v7.4.4
• CISA KEV: CVE-2025-47813

Serial number:AV26-243
Date: March 16, 2026

On March 13, 2026, Microsoft published a security update to address vulnerabilities in the following product:

• Microsoft Edge Stable Channel – versions prior to 146.0.3856.59

Microsoft has indicated that CVE-2026-3910 has an available exploit.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary update.

• Microsoft Edge Stable Channel Release Notes

Serial number:AV26-242
Date:March 16, 2026

Between March 9 and 15, 2026, Red Hat published security advisories to address vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder – multiple versions and platforms
• Red Hat Enterprise Linux – multiple versions and platforms
• Red Hat Enterprise Linux Server – multiple versions and platforms
• Red Hat Enterprise Linux for Real Time – multiple versions and platforms

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Red Hat Security Advisories

Serial number:AV26-241
Date:March 16, 2026

Between March 9 and 15, 2026, CISA published ICS advisories to address vulnerabilities in the following products:

• Apeman Cameras ID71 – all versions
• Ceragon Siklu MultiHaul and EtherHaul Series – multiple versions
• Honeywell IQ4x BMS Controller – multiple versions and models
• Inductive Automation Ignition Software – versions prior to 8.3.0
• Lantronix EDS3000PS – version 3.1.0.0R2
• Lantronix EDS5000 – version 2.1.0.0R3
• Siemens Heliox EV Chargers – version Heliox Mobile DC 40 kW EV Charging Station
• Siemens Heliox EV Chargers – version Heliox Flex 180 kW EV Charging Station
• Siemens RUGGEDCOM APE1808 Devices – all versions
• Siemens SIDIS Prime – versions prior to V4.0.800
• Siemens SIMATIC – multiple versions and models
• Trane Tracer Concierge – versions prior to v6.3.2310
• Trane Tracer SC – versions prior to v4.4_SP7
• Trane Tracer SC+ – versions prior to v6.3.2310

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates if available.

• CISA ICS Advisories

Serial number:AV26-240
Date:March 16, 2026

On March 13, 2026, Google published a security advisory to address vulnerabilities in the following product:

• Stable Channel Chrome for Desktop – versions prior to 146.0.7680.80 (Windows/Mac) and 146.0.7680.80 (Linux)

On March 13, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-3909 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory
• CISA KEV: CVE-2026-3909