FREE DIAGNOSTIC

Serial number:AV26-071
Date:January 30, 2026

On January 27, 2026, Mozilla published a security advisory to address vulnerabilities in the following product:

• Firefox – versions prior to 147.0.2

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Mozilla Foundation Security Advisory 2026-06
• Mozilla Security Advisories

Serial number:AV26-070
Date:January 30, 2026

On January 29, 2026, Microsoft published a security update to address vulnerabilities in the following product:

• Microsoft Edge Stable Channel – versions prior to 144.0.3719.104

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary update.

• Microsoft Edge Stable Channel Release Notes

Serial number:AV26-069
Date:January 30, 2026

On January 29, 2026, WatchGuard published a security advisory to address a vulnerability in the following product:

• Fireware OS – versions prior to 2026.1
• Fireware OS – versions prior to 12.11.7
• Fireware OS – versions prior to 12.5.16

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• WatchGuard Firebox LDAP Injection - CVE-2026-1498
• WatchGuard Security Advisories

Serial number:AV26-068
Date:January 29, 2026
Updated:January 30, 2026

On January 29, 2026, Ivanti published a security advisory to address critical vulnerabilities in the following product:

• Ivanti Endpoint Manager Mobile (EPMM) – version 12.5.0.0 and prior, 12.6.0.0 and prior, 12.7.0.0 and prior, version 12.5.1.0 and prior and 12.6.1.0 and prior

Update 1

On January 29, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-1281 to their Known Exploited Vulnerabilities (KEV) Database.

Ivanti has stated that vulnerabilities CVE-2026-1281 & CVE-2026-1340 have been exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-1281 & CVE-2026-1340)
• Analysis Guidance Ivanti Endpoint Manager Mobile (EPMM) CVE-2026-1281 & CVE-2026-1340
• Ivanti Security Advisories
• CISA KEV: CVE-2026-1281

Serial number:AV26-067
Date:January 27, 2026

On January 27, 2026, Citrix published a security advisory to address vulnerabilities in the following product:

• XenServer – version 8.4

The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations.

• Citrix Security Advisory – CTX695997
• Citrix Security Advisories

Serial number:AV26-066
Date:January 29, 2026

On January 29, 2026, B&R published ICS advisories to address vulnerabilities in the following products:

• PVI – versions prior to 6.5.0
• B&R PCs – multiple models and versions

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates.

• SA24P003: B&R PCs vulnerable to PixieFail attack (PDF)
• SA26P001: Insertion of sensitive Information into PVI Logfile (PDF)
• B&R Cyber Security Advisories and Notices