Serial number:AV26-1130
Date:November 5, 2026
Updated: November 9, 2026

As of November 5, 2026, OpenBSD is affected by a vulnerability in the following product:

• OpenSSH
  • Prior to 10.6p2

Update 1

On November 9, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-123158 to their Known Exploited Vulnerabilities (KEV) Catalog

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• OpenSSH Release Notes
• OpenSSH
• CISA KEV: CVE-2026-123158

Serial Number: AV26-1112
Date: November 2, 2026
Updated: November 9, 2026

As of November 2, 2026, Barracuda Networks is affected by a vulnerability in the following products:

• Barracuda Email Security Gateway (ESG)
  • Prior to 9.4.0.030
• Barracuda Load Balancer Application Delivery Controller (ADC)
  • Prior to 6.4.0
• Barracuda Web Application Firewall (WAF)
  • Prior to 11.0.1
• Barracuda Web Security Gateway (WSG)
  • Prior to 16.1.100.100
• Barracuda Message Archiver (BMA)
  • Prior to 5.5.4.0
• Barracuda WAF Control Center (WCC)
  • Prior to 2.2.1

Update 1

Open source reporting indicates that CVE-2026-116606 is exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Pre-Authentication Authorization Bypass and Command Injection Vulnerabilities in Certain Barracuda Products — Updates Available
• Barracuda Product Security Advisories

Serial number:AV26-1136
Date:November 9, 2026

As of November 4, 2026, Red Hat is affected by vulnerabilities in the following products:

• Exploit Intelligence
  • All version
• OpenShift Serverless
  • All version
• Red Hat AMQ Broker 7
  • All version
• Red Hat Ansible Automation Platform 2
  • All version
• Red Hat Ansible Automation Platform Ansible Core 2
  • All version
• Red Hat Build of Keycloak
  • All version
• Red Hat Enterprise Linux 10 / 6 / 7 / 8 and 9
  • All version
• Red Hat Fuse 7
  • All version
• Red Hat Hardened Images
  • All version
• Red Hat JBoss Enterprise Application Platform 7 and 8
  • All version
• Red Hat JBoss Enterprise Application Platform Expansion Pack
  • All version
• Red Hat OpenShift AI (RHOAI)
  • All version
• Red Hat OpenShift Container Platform 4 and 5
  • All version
• Red Hat OpenShift Container Platform 5
  • All version
• Red Hat OpenShift Dev Spaces
  • All version
• Red Hat Satellite 6
  • All version
• Red Hat Single Sign-On 7
  • All version
• Red Hat build of Apache Camel 4 for Quarkus 3
  • All version
• Red Hat build of Apicurio Registry 3
  • All version
• Red Hat build of Debezium 3
  • All version
• Red Hat build of Keycloak 26.4
  • Prior to 26.4-29
  • Prior to 26.4-30
  • Prior to 26.4.17-2
• Red Hat build of Keycloak 26.4.17
  • All version
• Red Hat build of Keycloak 26.6
  • Prior to 26.6-24
  • Prior to 26.6.8-2
• Red Hat build of Keycloak 26.6.8
  • All version
• Red Hat build of Quarkus
  • All version
• Self-service automation portal 2
  • All version
• ansible-core
  • Prior to 2.23.0
• gst-plugins-good
  • Prior to 1.28.2

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Red Hat Security Advisories

Serial number:AV26-1135
Date:November 9, 2026

As of November 4, 2026, IBM is affected by vulnerabilities in the following products:

• IBM MQ
  • Prior to or equal to 10.0.0.5 LTS and CD
  • Prior to or equal to 9.2.0.44 LTS
  • Prior to or equal to 9.3.0.42 LTS
  • Prior to or equal to 9.4.0.26 LTS
  • Prior to or equal to 9.4.5.1 CD
• IBM Watson Speech Services Cartridge
  • Prior to or equal to 5.4.0

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Security Bulletin: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability (CVE-2026-11724)
• Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker. (CVE-2026-17493)
• IBM Product Security Incident Response

Serial number:AV26-1134
Date:November 9, 2026

As of November 2, 2026, Dell is affected by vulnerabilities in the following products:

• Alienware Command Center (AWCC)
  • Prior to 6.14.54.0
• Wyse Management Suite
  • Prior to 2609.0.0.155

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• DSA-2026-405: Security Update for Dell Wyse Management Suite (WMS) for Multiple Vulnerabilities
• DSA-2026-429: Security Update for Dell Alienware Command Center 6.x for Multiple Vulnerabilities
• Security Advisories, Notices and Resources

Serial number: AV26-1133

Date: November 6, 2026

As of November 6, 2026, SonicWall is affected by a vulnerability in the following product:

• SonicOS
  • prior to 7.3.4-7013
  • prior to 8.2.2-8015

SonicWall indicates that CVE-2026-19868 is being exploited.

On November 6, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-19868 to their Known Exploited Vulnerabilities (KEV) Catalog.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• SonicWall SonicOS Affected By Multiple Vulnerabilities
• SonicWall Security Advisory
• CISA KEV: CVE-2026-19868