Serial number:AV26-246
Date:March 17, 2026

On March 12, 2026, GitHub published security advisories to address vulnerabilities in the following products:

• GitHub Enterprise Server – versions 3.19.x prior to 3.19.4
• GitHub Enterprise Server – versions 3.18.x prior to 3.18.7
• GitHub Enterprise Server – versions 3.17.x prior to 3.17.13
• GitHub Enterprise Server – versions 3.16.x prior to 3.16.16

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Enterprise Server 3.19.4
• Enterprise Server 3.18.7
• Enterprise Server 3.17.13
• Enterprise Server 3.16.16

Serial number:AV26-245

Date:March 17, 2026

On March 17, 2026, Spring published security advisories to address vulnerabilities in the following product:

• Spring AI – 1.0.x versions prior to 1.0.4
• Spring AI – 1.1.x versions prior to 1.1.3

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter
• CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter
• Spring Security Advisories

Serial number:AV26-244
Date:March 17, 2026

Between March 16 and 17, 2026, HPE published security advisories to address vulnerabilities in the following products:

• HPE Telco Service Orchestrator – versions prior to v4.2.12
• HPE Brocade Fabric OS – versions prior to 9.2.1c3 and 9.2.2c
• HPE SANnav Management Software – versions prior to v2.4.0b

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• HPESBNW05029 rev.1 - HPE Telco Service Orchestrator, Remote Buffer Overflow
• HPESBST05001 rev.1 - HPE SAN Switches with Brocade Fabric OS (FOS), Multiple Vulnerabilities
• HPESBST05000 rev.1 - HPE B-Series SANnav Management Portal, Multiple Vulnerabilities
• HPE Security Bulletin Library

Serial number:AV25-391
Date: July 3, 2025
Updated: March 16, 2026

On May 14, 2025, Wing FTP a published an update to address a critical vulnerability in the following product:

• Wing FTP Server – version v7.4.3 and prior

Open-source reporting has indicated that proof-of-concept exploit code is available for CVE-2025-47812.

Update 1

On July 10, 2025, open-source reporting indicated that the Wing FTP Remote Code Execution vulnerability CVE-2025-47812 has been actively exploited in the wild. The vulnerability is rated a CVSS 10.0.

Update 2

On March 16, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-47813 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Wing FTP Server v7.4.4
• CISA KEV: CVE-2025-47813

Serial number:AV26-243
Date: March 16, 2026

On March 13, 2026, Microsoft published a security update to address vulnerabilities in the following product:

• Microsoft Edge Stable Channel – versions prior to 146.0.3856.59

Microsoft has indicated that CVE-2026-3910 has an available exploit.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary update.

• Microsoft Edge Stable Channel Release Notes

Serial number:AV26-242
Date:March 16, 2026

Between March 9 and 15, 2026, Red Hat published security advisories to address vulnerabilities in multiple products. Included were updates to address vulnerabilities in the Linux kernel for the following products:

• Red Hat CodeReady Linux Builder – multiple versions and platforms
• Red Hat Enterprise Linux – multiple versions and platforms
• Red Hat Enterprise Linux Server – multiple versions and platforms
• Red Hat Enterprise Linux for Real Time – multiple versions and platforms

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Red Hat Security Advisories