Serial Number: AV26-815
Date: August 13, 2026

As of August 12, 2026, WebPros is affected by a vulnerability in the following product:

• Plesk (Windows/Linux)
  • Prior to 18.0.79.6
  • Prior to 18.0.80.2

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Vulnerability CVE-2026-64639: Privilege Escalation via Database Cloning in Plesk

Serial Number: AV26-814
Date: August 13, 2026

As of August 12, 2026, GitLab is affected by vulnerabilities in the following product:

• GitLab
  • Prior to 19.0.6
  • Prior to 19.1.4
  • Prior to 19.2.2

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• GitLab Patch Release: 19.2.2, 19.1.4, 19.0.6 | GitLab Docs

Serial Number: AV26-813
Date: August 13, 2026

As of August 11, 2026, AMD is affected by vulnerabilities in the following products:

• AMD Power Design Manager (PDM) Software Installer for Windows
  • all except 2026.1
• AMD Power Design Manager (PDM) Software Un-Installer
  • all except 2026.1
• AMD Ryzen Master
  • all except 3.0.0.4199
  • all except 3.1.1.5502
• AMD Ryzen Master (AMD Ryzen 3000 Series Processors)
  • all except 2.14.3.5040
• AMD Ryzen Master Monitoring SDK
  • all except 3.1.1.5478
• AMD Ryzen Master SDK
  • all except 3.0.1.4732
• Vitis Libraries - Security Module
  • all except 2026.1
• Vitis Embedded Single File Download (SFD) for Windows
  • all except 2026.1
• Vitis Unified Installer for FPGAs & Adaptive SoCs in Windows
  • all except 2026.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Vitis Vulnerabilities
• AMD Power Design Manager (PDM) Vulnerabilities
• AMD Ryzen Master Vulnerability
• AMD Product Security

Number: AL26-018
Date: August 13, 2026

Audience

This Alert is intended for IT professionals and managers.

Purpose

An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide additional detection and mitigation advice to recipients. The Canadian Centre for Cyber Security ("Cyber Centre") is also available to provide additional assistance regarding the content of this Alert to recipients as requested.

Details

The Canadian Centre for Cyber Security (Cyber Centre) is aware of active exploitation^Footnote1 of a high-severity vulnerability affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software^Footnote2. Cisco disclosed this vulnerability on August 11, 2026, and has confirmed active exploitation in the wild.

In response to the Cisco security advisory released on August 11, 2026, the Cyber Centre issued AV26-807^Footnote3 on August 12, 2026.

Tracked as CVE-2026-20349^Footnote4, this vulnerability is an Improper Clearing of Heap Memory Before Release ('Heap Inspection') (CWE-244)^Footnote5 vulnerability that may allow a remote attacker to cause a denial-of-service (DoS) condition. The vulnerability is caused by insufficient error checking when processing HTTP requests. An unauthenticated remote attacker could exploit the issue by sending a specially crafted HTTP request to an affected SSL VPN service. Successful exploitation could cause the firewall to reload unexpectedly, resulting in a denial of service (DoS) condition.

Cisco Secure Firewall ASA and Secure Firewall Threat Defense SSL VPN Services that are accessible from the internet, particularly those with the vulnerable SSL VPN-Related services enabled, are at risk of being impacted.

This vulnerability affects Cisco devices if they are running affected ASA or FTD software releases and have one or more of the following features enabled, which expose SSL listen sockets:

• IKEv2 Remote Access VPN with client services
• SSL VPN (WebVPN)
• Zero Trust Network Access (ZTNA) (FTD only)

Cisco has confirmed that Cisco Secure Firewall Management Center (FMC) Software is not affected by this vulnerability.

Suggested actions

The Cyber Centre recommends that organizations:

• Identify internet-accessible Cisco Secure Firewall ASA and FTD systems that provide Remote Access SSL VPN services.
• Determine whether WebVPN, IKEv2 Remote Access VPN (with client services), or Zero Trust Network Access features are enabled.
• Review firewall and VPN logs for evidence of unexpected reloads, service interruptions, or suspicious HTTP requests targeting SSL VPN services.
• Review whether SSL VPN, Remote Access VPN, or ZTNA services are enabled.
• Prioritize remediation of internet-facing systems.

Upgrade affected Cisco ASA instances to a fixed version:

The Cyber Centre recommends organizations:

• Review the Cisco advisory and evaluate exposure using the Cisco Software Checker.
• Ensure perimeter devices and VPN gateways are included in vulnerability management and patch management programs.
• Monitor network infrastructure for service disruptions and indicators of attempted exploitation.
• Consolidate, monitor, and defend Internet gateways.
• Patch operating systems, applications, and network infrastructure in a timely manner.
• Harden exposed services and minimize unnecessary internet-facing management interfaces.
• Follow Cisco’s remediation guidance and CISA KEV recommendations.

In addition, the Cyber Centre strongly recommends that organizations review and implement the Cyber Centre's Top 10 IT Security Actions with an emphasis on the following topics^{Footnote6Footnote7}.

• Consolidating, monitoring, and defending Internet gateways
• Patch operating systems and applications
• Harden operating systems and applications
• Isolate web-facing applications

Should activity matching the content of this alert be discovered, recipients are encouraged to report via My Cyber Portal or email contact@cyber.gc.ca.

References

Serial number:AV26-812
Date:August 12, 2026

As of August 12, 2026, Fortinet is affected by a vulnerability in the following products:

• FortiClientWindows
  • Prior to or equal to 7.2.11
  • Prior to or equal to 7.4.3
• FortiManager
  • Prior to or equal to 7.61
  • Prior to or equal to 7.4.5
  • Prior to or equal to 7.2.9
• FortiManager Cloud
  • Prior to or equal to 7.61
  • Prior to or equal to 7.4.5
  • Prior to or equal to 7.2.9
• FortiWeb
  • Prior to or equal to 8.0.2
  • Prior to or equal to 7.6.6
  • Prior to or equal to 7.4.11
  • Prior to or equal to 7.2.12

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• PSIRT | FortiGuard Labs
• PSIRT | FortiGuard Labs
• PSIRT | FortiGuard Labs
• Fortinet PSIRT Advisories

Serial number:AV26-811
Date:August 12, 2026

As of August 12, 2026, Phoenix Contact is affected by vulnerabilities in the following products:

• AXC F 1152
  • Prior to 2026.0.3
• AXC F 1252
  • Prior to 2026.0.3
• AXC F 2000 EA
  • Prior to 2026.0.3
• AXC F 2152
  • Prior to 2026.0.3
• AXC F 3152
  • Prior to 2026.0.3
• BPC 9102S
  • Prior to 2026.0.3
• BPC 9202S
  • Prior to 2026.0.3
• Catan C1
  • Prior to 2026.0.3
• EPC 1502
  • Prior to 2026.0.3
• EPC 1522
  • Prior to 2026.0.3
• RFC 4072R
  • Prior to 2026.0.3
• RFC 4072S
  • Prior to 2026.0.3
• VL3 UPC 2440 EDGE
  • Prior to 2026.0.3
• VPLCNEXT CONTROL 1000
  • Prior to 2026.0.3
• VPLCNEXT CONTROL 2000
  • Prior to 2026.0.3
• VPLCNEXT CONTROL 3000
  • Prior to 2026.0.3
• VPLCNEXT CONTROL 500
  • Prior to 2026.0.3

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware
• Phoenix Contact Advisories