Serial number: AV26-311
Date: April 2, 2026

On April 2, 2026, Cesanta published a security advisory to address vulnerabilities in the following product:

• Mongoose - versions 7.0 to 7.20

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Cesanta Mongoose
• Mongoose.ws

Serial number: AV26-310
Date: April 2, 2026

On April 2, 2026, Progress published a security advisory to address vulnerabilities in the following product:

• Progress ShareFile - versions prior to v5.12.4 and versions prior to v6

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Security Vulnerability Fix For ShareFile Storage Zones Controller 5.x (February 2026)

Serial number: AV26-309
Date: April 2, 2026

On April 1, 2026, WatchGuard published a security advisory to address a vulnerability in the following products:

• Fireware OS 2025-1 - versions 2025.1 to 2026.1.2

• Fireware OS 12.x - versions 12.6.1 to 12.11.8

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• WatchGuard Firebox Arbitrary File Write via Path Traversal in Fireware Web UI
• WatchGuard Security Advisories

Serial number: AV26-275
Date: March 24, 2026
Updated: April 2, 2026

On March 24, 2026, Apple published security updates to address vulnerabilities in the following products:

• iOS – versions prior to 18.7.7 and versions prior to 26.4
• iPadOS – versions prior to 18.7.7 and versions prior to 26.4
• macOS Sequoia – versions prior to 15.7.5
• macOS Sonoma – versions prior to 14.8.5
• macOS Tahoe – versions prior to 26.4
• tvOS – versions prior to 26.4
• visionOS – versions prior to 26.4
• watchOS – versions prior to 26.4

Update 1
On April 1, 2026 Apple expanded the availability of iOS 18.7.7 for more devices to protect from DarkSword iOS exploit kit web attacks.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• About the security content of iOS 18.7.7 and iPadOS 18.7.7
• Apple Security Updates

Serial number:AV26-306
Date:April 1, 2026
Updated: April 1, 2026

On March 31, 2026, Google published a security advisory to address vulnerabilities in the following product:

• Stable Channel Chrome for Desktop – versions prior to 146.0.7680.177/178 (Windows/Mac) and 146.0.7680.177 (Linux)

Google is aware that an exploit for CVE-2026-5281 exists in the wild.

Update 1

On April 1, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-5281 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory
• CISA KEV: CVE-2026-5281

Serial number:AV26-308
Date:April 1, 2026

On April 1, 2026, Drupal published a security advisory to address a critical vulnerability in the following product :

• SAML SSO - Service Provider – versions prior to 3.1.4

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031
• Drupal Security Advisories