Serial number:AV26-1022
Date:October 8, 2026

As of October 8, 2026, IBM is affected by vulnerabilities in the following products:

• IBM DataPower Gateway 10.5.0
  • Prior to or equal to 10.5.0.22
• IBM DataPower Gateway 10.6.0
  • Prior to or equal to 10.6.0.10
• IBM DataPower Gateway 10.6CD
  • Prior to or equal to 10.6.6
• IBM DataPower Gateway 11.0.0
  • Prior to or equal to 11.0.0.2
• Langflow OSS
  • Version 1.0.0 to 1.12.2

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Security Bulletin: IBM DataPower Gateway affected by cross-site scripting (CVE-2026-14990)
• Security Bulletin: IBM DataPower Gateway affected by multiple CVEs
• Security Bulletin: Langflow OSS is affected by multiple vulnerabilities
• IBM Product Security Incident Response

Serial number:AV26-1021
Date:October 8, 2026

As of October 6, 2026, Elastic is affected by vulnerabilities in the following products:

• Elasticsearch
  • Prior to or equal to 8.19.23
  • Prior to or equal to 9.4.8
  • Prior to or equal to 9.5.5
• Kibana
  • Prior to or equal to 8.19.22
  • Prior to or equal to 9.4.7
  • Prior to or equal to 9.5.4

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-185) - Security Announcements - Discuss the Elastic Stack
• Kibana 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-187) - Security Announcements - Discuss the Elastic Stack
• Elastic Security Announcements

Serial number:AV26-1020
Date:October 8, 2026

As of October 7, 2026, Cisco is affected by vulnerabilities in the following products:

• Cisco Nexus 3000 Series Switches
  • Multiple versions and models
• Cisco Nexus 9000 Series Switches
  • Multiple versions and models
• UCS 6300 Series Fabric Interconnect
  • Prior to 4.3(6.260049)
• Meraki Campus Gateways
  • Prior to 32.2.5 (late Oct 2026)
  • Prior to 33.1.4 (mid-Nov 2026)
• Meraki MG Cellular Gateways
  • Prior to 26.1.4
• Meraki MR Wireless Access Points
  • Multiple versions
• Meraki MS Series Switches
  • Multiple Versions
• Meraki MV Smart Cameras
  • Prior to 8.0
• Meraki MX Security and SD-WAN Appliances
  • Multiples versions
• Cisco License On-Prem Release
  • Prior to 10-202609
• Cisco NX-OS Software Release
  • Multiples versions
• Cisco UCS Software Release
  • Prior to 4.3(6.260049)
  • Prior to 4.3(6.260059)
  • Prior to 6.0(2.260080)
• Cisco Application Policy Infrastructure Controller (APIC)
  • Prior to 6.0(9h)
  • Prior to 6.1(6g)
  • Prior to 6.2(3g)
• Cisco Finesse Release
  • Prior to 15.0(1) SU3 (Feb 2027)
• Cisco Packaged CCE and Unified CCE Release
  • Prior to 15.0(1)ES202701 (Jan 2027)
• Cisco Unified CCX Release
  • Prior to 15.0(1) SU2 (Feb 2027)

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Cisco Security Advisories

Serial number:AV26-1019
Date:October 8, 2026

As of October 7, 2026, HashiCorp is affected by vulnerabilities in the following products:

• Vault Community Edition
  • Prior to 2.1.2
• Vault Enterprise
  • Prior to 1.19.23
  • Prior to 1.20.17
  • Prior to 1.21.12
  • Prior to 2.1.2

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• HCSEC-2026-41 - Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots - Security - HashiCorp Discuss
• Security - HashiCorp Discuss

Serial number:AV26-1018
Date:October 8, 2026

As of October 7, 2026, Splunk is affected by vulnerabilities in the following products:

• Splunk Enterprise
  • Prior to 10.0.10
  • Prior to 10.2.7
  • Prior to 10.4.3
  • Prior to 9.4.15
• Splunk MCP Server
  • Prior to 1.2.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Security Vulnerabilities in Splunk Enterprise - September/October 2026 - SVD-2026-1001
• Security Vulnerability in Splunk MCP Server - September/October 2026 - SVD-2026-1004
• Splunk Security Advisories

Serial number:AV26-1017
Date:October 7, 2026

As of October 6, 2026, SonicWall is affected by vulnerabilities in the following product:

• SMA1000 Models - 6210, 7210, 8200v
  • Version 12.4.3-03670 (platform-hotfix) and prior
  • Version 12.5.0-03082 (platform-hotfix) and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
• SonicWall Security Advisory