Serial number: AV26-723
Date: July 20, 2026

On July 17, 2026, WordPress published a security advisory to address vulnerabilities in the following product:

• WordPress 7.0 – versions prior to 7.0.2
• WordPress 6.9 – versions prior to 6.9.5
• WordPress 6.8 – versions prior to 6.8.6
• WordPress 7.1 beta – versions prior to 7.1 beta2

Open-source reporting indicates that CVE-2026-60137 and CVE-2026-63030 are being exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Facilitated SQL injection vulnerability in the `author__not_in` parameter of `WP_Query`
• REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
• WordPress 7.0.2 Release
• WordPress Releases

Serial number: AV26-722
Date: July 20, 2026

On July 20, 2026, HPE published a security advisory to address vulnerabilities in the following product:

• HPE Telco Automated Assurance – version v1.4 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• HPESBNW05082 rev.1 - HPE Telco Automated Assurance, Multiple Vulnerabilities
• HPE Security Bulletin Library

Serial number:AV26-693
Date:July 14, 2026
Updated: July 20, 2026

On July 13, 2026, ServiceNow published a security advisory to address a critical vulnerability in the following products:

• Brazil - versions prior to Brazil EA and Brazil GA
• Australia - versions prior to Australia Patch 2
• Zurich - versions prior to Zurich Patch 7b and Zurich Patch 9
• Yokohama - versions prior to Yokohama Patch 12 Hot Fix 1b and Yokohama Patch 13

Update 1

Open-source reporting indicates that CVE-2026-6875 is being exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• [Security Advisory] CVE-2026-6875 - Sandbox Escape in ServiceNow AI Platform
• ServiceNow security advisories

Serial number: AV26-721
Date: July 20, 2026

On July 20, 2026, Zimbra published a security advisory to address vulnerabilities in the following product:

• Zimbra Collaboration Suite (ZCS) Classic Web Client – versions prior to v10.1.20

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Patch Release Update: Zimbra 10.1.20
• Zimbra Patch Release Updates

Serial number: AV26-720
Date: July 20, 2026

On July 16, 2026, GitHub published security advisories to address vulnerabilities in the following products:

• GitHub Enterprise Server – versions 3.21.x prior to 3.21.3
• GitHub Enterprise Server – versions 3.20.x prior to 3.20.5
• GitHub Enterprise Server – versions 3.19.x prior to 3.19.9
• GitHub Enterprise Server – versions 3.18.x prior to 3.18.12
• GitHub Enterprise Server – versions 3.17.x prior to 3.17.18

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Enterprise Server 3.21.3
• Enterprise Server 3.20.5
• Enterprise Server 3.19.9
• Enterprise Server 3.18.12
• Enterprise Server 3.17.18

Serial number:AV26-719
Date:July 20, 2026

Between July 13 and 19, 2026, Red Hat published security advisories to address vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder – multiple versions and platforms
• Red Hat Enterprise Linux – multiple versions and platforms
• Red Hat Enterprise Linux Server – multiple versions and platforms
• Red Hat Enterprise Linux for Real Time – multiple versions and platforms

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Red Hat Security Advisories