Serial number:AV26-293
Date:March 27, 2026

On March 26, 2026, Microsoft published a security update to address vulnerabilities in the following product:

• Microsoft Edge Stable Channel – versions prior to 146.0.3856.84

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary update.

• Microsoft Edge Stable Channel Release Notes

Serial number:AV26-292
Date:March 27, 2026

On March 25, 2026, Ericsson published a security advisory to address vulnerabilities in the following product:

• Ericsson Indoor Connect 8855 – versions prior to 2025.Q3

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates if available.

• Security Bulletin – Ericsson Indoor Connect 8855, March, 2026
• Ericsson Security Advisories

Serial number:AV26-291
Date:March 27, 2026

Between March 25 and 26, 2026, FreeBSD published security advisories to address vulnerabilities in the following products:

• FreeBSD – version 14.x
• FreeBSD – version 15.0
• FreeBSD – version 13.5

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• TCP: remotely exploitable DoS vector (mbuf leak) (CVE-2026-4247)
• Remote denial of service via null pointer dereference (CVE-2026-4652)
• Remote code execution via RPCSEC_GSS packet validation (CVE-2026-4747)
• pf silently ignores certain rules (CVE-2026-4748)
• FreeBSD Security Advisories

Serial number:AV26-290
Date:March 27, 2026

On March 26, 2026, Siemens published a security advisory to address vulnerabilities in the following products. Included were updates for the following products:

• CPCI85 Central Processing/Communication – versions prior to V26.10
• RTUM85 RTU Base – versions prior to V26.10
• SICORE Base system – versions prior to V26.10.0

The Cyber Centre encourages users and administrators to review the web links provided, perform the suggested mitigations and apply the necessary updates.

• SSA-246443: Multiple Vulnerabilities in SICAM 8 Products
• Siemens Security Advisories

Serial number:AV26-289
Date:March 27, 2026

On March 26, 2026, WatchGuard published security advisories to address vulnerabilities in the following products:

• Fireware OS – versions prior to 2026.2
• Fireware OS – versions prior to 12.12

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• WatchGuard Firebox Insecure Deserialization in Fireware Access Portal (CVE-2026-4266)
• WatchGuard Security Advisories

Serial number:AV26-288
Date:March 26, 2026

Between March 23 and 26, 2026, Spring published security advisories to address vulnerabilities in the following products:

• Spring Cloud Config – versions prior to 3.1.3, 4.1.9, 4.2.6, 4.3.2 and 5.0.2
• Spring AI – versions prior to 1.0.5 and 1.1.4

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• CVE-2026-22739: Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks
• CVE-2026-22743: Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore
• CVE-2026-22744: RediSearch Query via Unescaped TAG Filter Values in RedisVectorStore
• CVE-2026-22742: Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching
• CVE-2026-22738: SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution
• Spring Security Advisories