Map

Serial number:AV26-614
Date:June 17, 2026

On June 17, 2026, Splunk published security advisories to address vulnerabilities in the following product. Included was a critical update for the following:

• Splunk AI Toolkit – versions prior to 5.7.4

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit
• Splunk Security Advisories

Serial number:AV26-613
Date: June 17, 2026

On June 17, 2026, Cisco published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following product:

Cisco ISE (Identity Services Engine) and Cisco ISE-PIC (Passive Identity Connector)

• Cisco ISE and ISE-PIC Releases prior to 3.3 - all versions
• Cisco ISE and ISE-PIC Release 3.3 - versions prior to 3.3 Patch 11
• Cisco ISE and ISE-PIC Release 3.4 - versions prior to 3.4 Patch 6
• Cisco ISE and ISE-PIC Release 3.5 - versions prior to 3.5 Patch 4 (August 2026)

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates, when available.

• Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities
• Cisco Security Advisories

Serial number:AV26-612
Date:June 17, 2026

On June 17, 2026, F5 published a security advisory to address vulnerabilities in the following products:

• F5 DoS for NGINX - version 4.9.0
• F5 WAF for NGINX Instance Manager - versions 5.9.0 to 5.13.1
• NGINX App Protect DoS - versions 4.3.0 to 4.7.0
• NGINX App Protect WAF - versions 5.2.0 to 5.8.0 and 4.10.0 to 4.16.0
• NGINX Open Source - versions 1.30.0 to 1.30.2 and 1.31.0 to 1.31.1
• NGINX Instance Manager - versions 2.17.0 to 2.22.0
• NGINX Gateway Fabric - multiple versions
• NGINX Ingress Controller - multiple versions
• NGINX Plus - version 37.0.0 R33 to 37.01 R36

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• K000161614: Out-of-band Security Notification (June 17, 2026)
• MyF5

Serial number:AV26-611
Date:June 17, 2026

On June 17, 2026, Mitel published a security advisory to address vulnerabilities in the following products. Included were critical updates for the following:

• MiCollab - multiple versions
• MiVoice Business Solution Virtual Instance (MiVB SVI) - version 2.1.0.9-2 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Mitel Product Security Advisory MISA-2026-0005
• Mitel Security Bulletins

Serial number:AV26-610
Date:June17, 2026

On June 16, 2026, Moxa published security advisories to address vulnerabilities in the following products:

• NPort 6000-G2 Series - version v1.1.0 and prior
• NPort W2150A-W4/W2250A-W4 Series - firmware version v1.5 and prior
• NPort W2150A/W2250A Series - firmware version v2.3 and prior

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. 

• CVE-2026-10825: Improper Validation of Input Vulnerability in Serial Device Servers
• CVE-2026-10828, CVE-2026-10829: Use of Externally-Controlled Format String and Stack-based Buffer Overflow Vulnerabilities in Serial Device Servers
• Moxa Security Advisories (en anglais seulement)

Serial number: AV26-609
Date: June 17, 2026

On June 16, 2026, Google published a security advisory to address vulnerabilities in the following product:

• Stable Channel Chrome for Desktop – versions prior to0.7827.155/.156 (Windows/Mac), and 149.0.7827.155 (Linux)

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates, when available.

• Google Chrome Security Advisory