Serial number:AV26-283
Date:March 26, 2026

On March 22, 2026, Aqua Security published a security advisory to address a critical vulnerability in the following products:

• trivy – version v0.69.4
• trivy dockerhub images– versions v0.69.5 and v0.69.6
• setup-trivy – versions prior to v0.2.6
• trivy-action – versions prior to v0.35.0

Open-source reporting indicates that CVE-2026-33634 has been exploited.

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• Trivy ecosystem supply chain temporarily compromised
• Aqua Security Advisories

Serial number:AV26-282
Date:March 26, 2026

On March 23, 2026, PTC published a security advisory to address vulnerabilities in the following products:

• PTC Windchill PDMLink – multiple versions
• PTC FlexPLM – multiple versions

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates, once available.

• Critical RCE vulnerability reported in Windchill
• PTC Advisory Center

Serial number:AV26-281
Date:March 25, 2026

On March 25, 2026, Cisco published a security advisory to address vulnerabilities in the following products:

• Cisco Catalyst 9300 Series Switches
• Cisco Catalyst 9200 Series Switches
• Cisco Catalyst 9000 Series Switches
• Cisco Catalyst ESS9300 Embedded Series Switches
• Cisco IOS Software
• Cisco IOS XE Software
• Cisco Secure Firewall ASA Software
• Cisco Secure FTD Software
• Cisco Catalyst IE9310 and IE9320 Rugged Series Switches
• Cisco IE3500 and IE3505 Rugged Series Switches
• Cisco Catalyst CW9800H Wireless Controllers
• Cisco Catalyst CW9800M Wireless Controllers
• Cisco Catalyst CW9800H1 Wireless Controllers
• Cisco Meraki MS390
• Cisco Catalyst SD-WAN Manager

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested recommendations, and apply the necessary updates when available.

• Cisco Event Response: March 2026 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication
• Cisco Security Advisories

Serial number:AV26-280
Date:March 25, 2026

On March 25, 2026, ISC published security advisories to address vulnerabilities in the following products:

• ISC BIND 9 – versions 9.11.0 to 9.16.50
• ISC BIND 9 – versions 9.18.0 to 9.18.46
• ISC BIND 9 – versions 9.20.0 to 9.20.20
• ISC BIND 9 – versions 9.21.0 to 9.21.19
• BIND Supported Preview Edition – versions 9.11.3-S1 to 9.16.50-S1
• BIND Supported Preview Edition – versions 9.18.11-S1 to 9.18.46-S1
• BIND Supported Preview Edition – versions 9.20.9-S1 to 9.20.20-S1

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• CVE-2026-1519: Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
• CVE-2026-3104: Memory leak in code preparing DNSSEC proofs of non-existence
• CVE-2026-3119: Authenticated query containing a TKEY record may cause named to terminate unexpectedly
• CVE-2026-3591: A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass
• BIND 9 Security Vulnerability Matrix

Serial number:AV26-279
Date:March 25, 2026

On March 25, 2026, Hitachi published security advisories to address vulnerabilities in the following products:

• Hitachi Ops Center Administrator (Linux) – versions 10.2.0 to versions prior to 11.0.8
• Hitachi Infrastructure Analytics Advisor (English version, Linux) – all versions
• Hitachi Ops Center Analyzer (English version, Linux) – versions 10.0.0-00 to versions prior to 11.0.5-00

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• Open Redirect Vulnerability in Hitachi Ops Center Administrator (CVE-2026-1166)
• Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer (CVE-2026-2072)
• Hitachi Vulnerability Information

Serial number:AV26-278
Date:March 25, 2026

On March 25, 2026, n8n published security updates to address vulnerabilities in the following products:

• n8n (Merge Node) – multiple versions
• n8n (Community Edition) – multiple versions
• n8n (Binary Data Inline HTML Rendering) – multiple versions
• n8n (GSuiteAdmin Node) – multiple versions
• n8n (Form Trigger/Chat Trigger Nodes) – multiple versions

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary update.

• n8n Security