Serial number:AV26-552
Date:June 5, 2026
Updated: Auguest 7, 2026

Between June 2 and 4, 2026, Progress published security advisories to address vulnerabilities in the following products. Included was a critical update for the following:

• Sitefinity CMS and Sitefinity Insight – multiple versions
• Progress Kemp LoadMaster – version GA v7.2.63.1 and prior
• Progress Kemp LoadMaster - version LTSF v7.2.54.17 and prior

Update 1

Open-source reporting indicates that CVE-2026-8037 is being exploited in the wild.

Update 2

On August 7, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-8037 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Sitefinity Security Advisory for Addressing Security Vulnerabilities CVE-2026-7312, CVE-2026-7198, CVE-2026-7195, CVE-2026-7201, CVE-2026-7313, May 2026
• LoadMaster Critical Security Bulletin – June 2026 – (CVE-2026-8037, CVE-2026-33691)
• Progress Trust Center
• CISA KEV: CVE-2026-8037

Serial Number:AV26-787
Date:August 7, 2026

As of August 6, 2026, Google is affected by vulnerabilities in the following product:

• Chrome
  • versions prior to 151.0.7922.109

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Google Chrome Security Advisory

Serial Number:AV26-769
Date:August 4, 2026
Updated:August 7, 2026

As of August 2, 2026, N-able is affected by vulnerabilities in the following product:

• N-central
  • Prior to 2026.3.1.10

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

On August 3, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-18577 to their Known Exploited Vulnerabilities (KEV) Database.

Update 1

On August 4, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-18556 to their Known Exploited Vulnerabilities (KEV) Database.

Update 2

On August 6, 2026, N-able released Hotfix 2 to further mitigate these vulnerabilities.

• 2026.3 HF1 Release Notes
• N-central 2026.3 Hotfix 1 – Mitigation for CVE-2026-18577 | N-able Status
• N-central 2026.3 Hotfix 2&nsp;– Additional Mitigation for CVE-2026-18577
• Release Notes | N-able Status
• CISA KEV:CVE-2026-18577
• CISA KEV: CVE-2026-18556

Serial number:AV26-786
Date:August 6, 2026

As of August 4, 2026, Django is affected by vulnerabilities in the following product:

• Django
  • before 6.0.8
  • before 5.2.17

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Django security releases issued: 6.0.8 and 5.2.17

Serial number:AV26-785
Date:August 6, 2026

As of August 5, 2026, Cisco is affected by vulnerabilities in the following products:

• Cisco Catalyst SD-WAN Release
  • prior to 20.9.10
  • prior to 20.12.8.1
  • prior to 20.15.6
  • prior to 20.18.4
  • prior to 26.1.2
• Cisco IOS XE Software Release
  • prior to 17.9.10
  • prior to 17.12.8
  • prior to 17.15.6
  • prior to 17.18.4 and 17.18.4a
  • prior to 26.1.2
• Cisco Secure FMC Software Release
  • prior to Cisco_Firepower_Mgmt_Center_Hotfix_GB-7.0.9.1-3.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_HL-7.2.11.1-4.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_HG-7.4.7.1-3.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_CY-7.6.5.1-2.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_AM-7.7.12.1-2.sh.REL.tar
  • prior to Cisco_Secure_FW_Mgmt_Center_Hotfix_P-10.0.1.1-2.sh.REL.tar
• Cisco IOS XE Software with SNMPv1
• Cisco IOS XE Software with SNMPv2c
• Cisco IOS XE Software with SNMPv3
• Cisco IOS XE Software with BEEP feature enabled
• Cisco IOS Software or IOS XE Software with XMCP Server feature enabled
• Cisco NFVIS Release
  • prior to 4.12
  • prior to 4.13
  • prior to 4.14
  • prior to 4.15
• Cisco UCS Server Software Release
  • prior to 4.2
  • prior to 4.3
  • prior to 6.0
  • prior to 3.2
  • prior to 4.15
  • prior to 4.3
• Cisco Telemetry Broker Appliances
  • prior to 6.0(2.260143)
• IEC6400 Edge Compute Appliances
  • prior to 4.3(6.260054)
• IOS XRv 9000 M7 Appliances
  • prior to 6.0(2.260143)
• Secure Endpoint Private Cloud Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 4.3(6.260054) (M6)
• Secure Firewall Management (FMC) Center Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 6.0(2.260143) (M6, M8)
• Secure Malware Analytics Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 4.3(6.260054) (M6)
• Secure Network Analytics Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 6.0(2.260143) (M6)
• Secure Network Server (ISE SNS) Appliances
  • prior to 4.3(2.260020) (M5)
  • prior to 6.0(2.260143) (M6, M8)

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

• Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026
• Cisco IOS XE Software Security Hardening Release: August 2026
• Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability
• Cisco IOS XE Software SNMP Denial of Service Vulnerability
• Cisco Security Advisories

Serial number:AV26-784
Date:August 6, 2026

As of August 6, 2026, Foxit is affected by a vulnerability in the following product:

• Foxit PDF Services API
  • before 2026-07-27

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Security Bulletins | Foxit