Serial number:AV26-1005
Date:October 6, 2026

As of October 6, 2026, Progress Software is affected by a vulnerability in the following product:

• Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator
  • Prior to 2.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Progress DataDirect Critical Security Alert Bulletin – September 2026 – CVE-2026-91140
• Progress Trust Center

Serial Number: AV26-1004
Date: October 6, 2026

As of October 5, 2026, Rapid7 is affected by a vulnerability in the following product:

• Velociraptor
  • Prior to 0.77.3

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• CVE-2026-78411 Velociraptor Server Metadata update with Insufficient Permission Check
• Rapid7 Security Advisories

Serial number:AV26-1003
Date:October 6, 2026

As of October 5, 2026, Android published a security bulletin to address vulnerabilities affecting Android devices.

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Android Security Bulletin—October 2026

Serial number:AV26-1002
Date:October 5, 2026

As of October 5, 2026, Atlassian is affected by a vulnerability in the following products:

• Bamboo Data Center
  • Version 10.2.4 and prior
  • Version 12.1.12 and prior
• Bamboo Server
  • All versions
• Bitbucket Data Center
  • Version 10.2.8 and prior
  • Version 10.5.1 and prior
  • Version 9.4.26 and prior
• Bitbucket Server
  • All versions
• Confluence Data Center
  • Version 10.2.19 and prior
  • Version 9.2.26 and prior
• Confluence Server
  • All versions
• Crowd Data Center
  • Version 6.3.7 and prior
  • Version 7.0.3 and prior
  • Version 7.1.1 and prior
  • Version 7.2.4 and prior
• Crowd Server
  • All versions
• Crucible Data Center
  • Version 4.9.15 and prior
• Crucible Server
  • Version 4.9.15 and prior
• Fisheye Data Center
  • Version 4.9.15 and prior
• Fisheye Server
  • Version 4.9.15 and prior
• Jira Service Management Data Center
  • Version 10.3.26 and prior
  • Version 11.3.12 and prior
  • Version 5.12.40 and prior
• Jira Service Management Server
  • Version 5.12.40 and prior
• Jira Software Data Center
  • Version 10.3.26 and prior
  • Version 11.3.12 and prior
  • Version 9.12.40 and prior
• Jira Software Server
  • Version 9.12.40 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products
• Security Advisories & Bulletins

Serial Number: AV26-1001
Date: October 5, 2026

As of October 2, 2026, Microsoft is affected by a vulnerability in the following products:

• Microsoft Exchange Server 2016 Cumulative Update 23
  • Prior to 15.01.2507.075
• Microsoft Exchange Server 2019 Cumulative Update 14
  • Prior to 15.02.1544.048
• Microsoft Exchange Server 2019 Cumulative Update 15
  • Prior to 15.02.1748.053
• Microsoft Exchange Server Subscription Edition RTM
  • Prior to 15.02.2562.053

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2026-96940
• Microsoft Security Update Guide

Serial Number: AV26-1000
Date: October 5, 2026

As of October 5, 2026, Hewlett Packard Enterprise (HPE) is affected by a vulnerability in the following product:

• HPE Integrated Lights-Out (iLO) 7
  • Prior to 1.25.00

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• HPESBHF05163 rev.1 - HPE Integrated Lights-Out (iLO) 7 Using COM, User Validation Failure Vulnerability
• HPE Security Bulletin Library