Serial number:AV26-495
Date:May 21, 2026

On May 20, 2026, FreeBSD published security advisories to address vulnerabilities in the following product:

• FreeBSD – all supported versions

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• FreeBSD Security Advisories

Serial number:AV26-494
Date:May 21, 2026

On May 21, 2026, Trend Micro published a security advisory to address vulnerabilities in the following products:

• Apex One (on-premise) – server/agent builds prior to 2019 (on-prem) build 17079
• Apex One as a service – SaaS
• Trend Vision One Endpoint - SEP – agent builds prior to 14.0.20731

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• ITW SECURITY BULLETIN: Apex One and Vision One – Standard Endpoint Protection (SEP) May 2026 Security Bulletin
• Trend Micro Business Success Vulnerability Response

Serial number:AV26-493
Date:May 20, 2026

On May 20, 2026, Splunk published security advisories to address vulnerabilities in the following products. Included were critical updates for the following:

• Splunk User Behavior Analytics – versions prior to 5.4.5
• Splunk AppDynamics Machine Agent – versions prior to 26.4.0
• Splunk AppDynamics Java Agent – versions prior to 26.4.0
• Splunk AppDynamics Private Synthetic Agent – versions prior to 26.4.0
• Splunk AppDynamics Python Agent – versions prior to 26.4.1
• Splunk AppDynamics Cluster Agent – versions prior to 26.4.0
• Splunk AppDynamics Database Agent – versions prior to 26.4.0
• Splunk AppDynamics Analytics Agent – versions prior to 26.4.0
• Splunk AppDynamics Apache Web Server Agent – versions prior to 25.11.1
• Splunk Universal Forwarder – versions 9.4.0 to 9.4.10
• Splunk Enterprise – multiple versions and platforms
• Splunk Cloud Platform – multiple versions and platforms
• Splunk AI Toolkit – versions prior to 5.7.3

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Splunk Security Advisories

Serial number:AV26-492
Date: May 20, 2026

On May 20, 2026, Drupal published a security advisory to address a critical vulnerability in the following product:

• Drupal Core – multiple versions

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates or perform the suggested mitigations.

• Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
• Drupal Security Advisories

Serial number:AV26-491
Date: May 20, 2026

On May 20, 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included was a critical update for the following:

• Cisco Secure Workload – version 3.9 and prior
• Cisco Secure Workload – versions prior to 3.10.8.3
• Cisco Secure Workload – versions prior to 4.0.3.17

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Cisco Secure Workload Unauthorized API Access Vulnerability
• Cisco Security Advisories

Serial number:AV26-490
Date:May 20, 2026

On May 20, 2026, ISC published security advisories to address vulnerabilities in the following products:

• ISC BIND 9 – versions 9.0.0 to 9.16.50
• ISC BIND 9 – versions 9.18.0 to 9.18.48
• ISC BIND 9 – versions 9.20.0 to 9.20.22
• ISC BIND 9 – versions 9.21.0 to 9.21.21
• BIND Supported Preview Edition – versions 9.9.3-S1 to 9.16.50-S1
• BIND Supported Preview Edition – versions 9.18.11-S1 to 9.18.48-S1
• BIND Supported Preview Edition – versions 9.20.9-S1 to 9.20.22-S1

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation
• CVE-2026-5947: SIG(0) validation during query flood may lead to undefined behavior
• CVE-2026-5946: Invalid handling of CLASS != IN
• CVE-2026-3593: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
• BIND 9 Security Vulnerability Matrix