Serial number:AV26-088
Date:February 4, 2026

On February 4, 2026, Splunk published security advisories to address critical vulnerabilities in the following product:

• Splunk SOAR – versions prior to 7.1.0

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Third-Party Package Updates in Splunk SOAR - February 2026
• Splunk Security Advisories

Serial number:AV26-087
Date:February 4, 2026

On February 4, 2026, Cisco published security advisories to address vulnerabilities in the following products:

• Cisco AsyncOS for Cisco Secure Web Appliance - versions prior to 15.2.5-011
• Cisco Evolved Programmable Network Manager (EPNM) – versions prior to 8.1.1
• Cisco Meeting Management Release – versions prior to 3.12.1 MR
• Cisco Prime Infrastructure – versions prior to 3.10.6 Security Update 2
• Cisco TelePresence CE Software in Cloud-Aware Operation – versions prior to RoomOS October 2025 Release
• Cisco TelePresence CE Software in Cloud-Aware Operation – versions prior to RoomOS December 2025 Release
• Cisco RoomOS Software in Cloud-Aware Operation – versions prior to RoomOS October 2025 Release
• Cisco RoomOS Software in Cloud-Aware Operation – versions prior to RoomOS December 2025 Release
• Cisco TelePresence CE Software in On-Premises Operation – versions prior to 11.27.5.0 and 11.32.3.0
• Cisco RoomOS Software in On-Premises Operation – versions prior to 11.27.5.0 and 11.32.3.0

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested recommendations, and apply the necessary updates when available.

• Cisco Security Advisories

Serial number:AV26-086
Date:February 4, 2026

On February 4, 2026, F5 published security updates for multiple products. Included were updates for the following:

• APM Clients – versions 7.2.5 to 7.2.6.1
• BIG-IP (all modules) – multiple versions
• BIG-IP APM – multiple versions
• BIG-IP Advanced WAF/ASM – versions 17.1.0 to 17.1.2
• BIG-IP Container Ingress Services for Kubernetes and OpenShift – versions 2.0.0 to 2.20.1, versions 1.0.0 to 1.14.0
• NGINX Gateway Fabric – versions 2.0.0 to 2.4.0, versions 1.2.0 to 1.6.2
• NGINX Ingress Controller – multiple versions
• NGINX Instance Manager – versions 2.15.1 to 2.21.0
• NGINX Open Source – versions 1.3.0 to 1.29.4
• NGINX Plus – versions R32 to R36 P1

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• K000159076: Quarterly Security Notification (February 2026)

Serial number:AV26-085
Date:February 4, 2026

On February 4, 2026, Moxa published a security advisory to address a vulnerability in the following products:

• TN-A Series – firmware version v4.1 and prior
• TN-G Series – firmware version v5.5 and prior

The Cyber Centre encourages users and administrators to review the web links provided and apply the necessary updates.

• CVE-2024-12297: Frontend Authorization Logic Disclosure Vulnerability in Ethernet Switches
• Moxa Security Advisories

Serial number:AV26-084
Date: February 4, 2026

On February 3, 2026, Django published a security advisory to address vulnerabilities in the following products:

• Django 4.2 – versions prior to 4.2.28
• Django 5.2 – versions prior to 5.2.11
• Django 6.0 – versions prior to 6.0.2

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Django Security Advisory

Serial number:AV26-083
Date:February 4, 2026

On February 2, 2026, Qualcomm published a security bulletin to address vulnerabilities affecting Qualcomm products.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Qualcomm Security Bulletin – February