Serial number:AV26-1131
Date:November 6, 2026

As of November 3, 2026, Mozilla is affected by a vulnerability in the following product:

• Firefox
  • Prior to 159.0.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Security Vulnerabilities fixed in Firefox 159.0.1
• Mozilla Foundation Security Advisories — Mozilla

Serial number:AV26-1130
Date:November 5, 2026

As of November 5, 2026, OpenBSD is affected by a vulnerability in the following product:

• OpenSSH
  • Prior to 10.6p2

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• OpenSSH Release Notes
• OpenSSH

Serial number:AV26-1129
Date:November 5, 2026

As of November 4, 2026, Rubyonrails is affected by a vulnerability in the following product:

• Active Storage
  • Prior to 8.0.5.2
  • Prior to 8.1.4.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Release 8.0.5.2 · rails/rails
• Release 8.1.4.1 · rails/rails
• Possible arbitrary file write and read in Active Storage image analysis

Serial number:AV26-1128
Date:Novembre 4, 2026

As of November 2, 2026, Android published a security bulletin to address vulnerabilities affecting Android devices.

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Android Security Bulletin—November 2026

Serial number:AV26-1127
Date:November 4, 2026

As of November 4, 2026, Cisco is affected by vulnerabilities in the following product:

• Cisco Unified Computing System (USC) Central Software
  • Prior to 2.1(2c)

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Cisco UCS Central Software Remote Code Execution Vulnerability
• Cisco Security Advisories

Serial number:AV26-1126
Date:November 4, 2026

As of November 3, 2026, GitHub is affected by vulnerabilities in the following product:

• Enterprise Server
  • 3.19.0 Prior to 3.19.14
  • 3.20.0 Prior to 3.20.10
  • 3.21.0 Prior to 3.21.8
  • 3.22.0 Prior to 3.22.3

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Release notes - GitHub Enterprise Server 3.19 Docs
• Release notes - GitHub Enterprise Server 3.20 Docs
• Release notes - GitHub Enterprise Server 3.21 Docs
• Release notes - GitHub Enterprise Server 3.22 Docs
• GitHub Enterprise Server releases