Serial number:AV26-306
Date:April 1, 2026

On March 31, 2026, Google published a security advisory to address vulnerabilities in the following product:

• Stable Channel Chrome for Desktop – versions prior to 146.0.7680.177/178 (Windows/Mac) and 146.0.7680.177 (Linux)

Google is aware that an exploit for CVE-2026-5281 exists in the wild.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory

Serial number:AV26-305
Date:March 31, 2026

On March 31, 2026, HPE published a security advisory to address a critical vulnerability in the following product:

• HPE Telco Network Function Virtualization Orchestrator – version v7.5.0 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• HPESBNW05033 rev.1 - HPE Telco Network Function Virtual Orchestrator, Improper Input Validation in the Undertow HTTP Server Core
• HPE Security Bulletin Library

Serial number:AV26-304
Date:March 31, 2026

On March 30, 2026, Symantec published a security advisory to address a vulnerability in the following product:

• Symantec Data Loss Prevention (DLP) Windows Endpoint – versions prior to DLP 16.1 MP2 and DLP 25.1 MP1

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Symantec Data Loss Prevention Security Update

Serial number:AV26-303
Date:March 31, 2026

On March 31, 2026, ABB published a security advisory to address vulnerabilities in the following product:

• ABB 800xA History – version 7.0 and prior
• ABB Batch Management – version 6.2 and prior
• ABB Production Response Batch History – version 6.2 and prior
• ABB 800xA for Symphony Plus Harmony – version 6.2 and prior
• ABB 800xA for AC 870P Melody – version 6.2 and prior
• ABB Application Change Management – version 6.2 and prior

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

• System 800xA affected by 3rd party component Vulnerabilities (PDF)
• ABB Cyber security alerts and notifications

Serial number:AV26-302
Date:March 31, 2026

On March 30, 2026, Nokia published security advisories to address a vulnerability in the following products:

• Nokia GX G42, GX G31, GX G32, GX G34 – versions prior to GX r9.0

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• CVE-2026-34485 - CLI ACL Bypass in GX G42
• Nokia Product Security Advisory

Serial number:AV26-267
Date:March 23, 2026
Updated:March 30, 2026

On March 23, 2026, Citrix published a security advisory to address critical vulnerabilities in the following products:

• NetScaler ADC and NetScaler Gateway 14.1 – versions prior to 14.1-60.58
• NetScaler ADC and NetScaler Gateway 13.1 – versions prior to 13.1-62.23
• NetScaler ADC FIPS and NDcPP – versions prior to 13.1-37.262

Update 1

On March 30, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-3055 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

• NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-3055 and CVE-2026-4368
• Citrix Security Advisories
• CISA KEV: CVE-2026-3055