https://www.csa.gov.sg/alerts-and-advisories/alerts/ Timely information about security issues, vulnerabilities, and exploits. en Fri, 02 Oct 2026 11:18:19 +0800 Isomer (https://www.isomer.gov.sg) https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-130urn:isomer:resource:422675Attackers can exploit a high-severity vulnerability in Apple products to execute arbitrary code on affected devices. Patch immediately.Wed, 30 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-129urn:isomer:resource:422064Attackers are exploiting multiple vulnerabilities in Citrix NetScaler ADC and Citrix NetScaler Gateway. Patch immediately.Mon, 28 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-128urn:isomer:resource:421622Attackers are exploiting a high-severity vulnerability in WordPress to achieve remote code execution under specific conditions. Patch immediately.Thu, 24 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-127urn:isomer:resource:421509Attackers can exploit multiple vulnerabilities in Synology DiskStation Manager (DSM) to read or write arbitrary files and conduct denial-of-service attacks. Patch immediately.Wed, 23 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-126urn:isomer:resource:421060Attackers are exploiting a critical vulnerability in Cisco Identity Services Engine and Cisco Identity Services Engine Passive Identity Connector to bypass authentication and gain unauthorised access. Patch immediately.Mon, 21 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-125urn:isomer:resource:420785Attackers are exploiting a critical vulnerability in Cisco AsyncOS to execute arbitrary commands with root privileges. Patch immediately.Fri, 18 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-124urn:isomer:resource:420630Attackers are exploiting a high severity vulnerability in Vite development servers to retrieve restricted system and configuration files over HTTP. Patch immediately.Thu, 17 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-123urn:isomer:resource:420565Attackers are exploiting a critical vulnerability in GitLab to read arbitrary files from the server. Patch immediately.Thu, 17 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-122urn:isomer:resource:407073Attackers can exploit a high-severity vulnerability in MongoDB Server to gain full unauthenticated administrative access to the affected database. Patch promptly.Tue, 15 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-121urn:isomer:resource:406725Attackers can exploit critical vulnerabilities in Check Point Quantum Security Gateway and Security Management Server to perform remote code execution without authentication. Patch immediately.Mon, 14 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-120urn:isomer:resource:405927Attackers can exploit a high-severity vulnerability in PostgreSQL to execute arbitrary code on the affected system. Patch promptly.Wed, 09 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-119urn:isomer:resource:405925Attackers can exploit multiple vulnerabilities in SAP Products to execute arbitrary commands, obtain sensitive credentials, replace or delete tenant data and perform unauthorised actions. Patch immediately.Wed, 09 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-117urn:isomer:resource:405916Attackers are exploiting a critical vulnerability in Adobe Commerce, Adobe Commerce B2B and Adobe Magento to execute arbitrary code. Patch immediately.Wed, 09 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-118urn:isomer:resource:405915Attackers are exploiting a critical vulnerability in N-Able N-Central remote management and monitoring tool to execute code remotely without authentication. Patch immediately.Wed, 09 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-116urn:isomer:resource:405742Microsoft has released security patches to address multiple vulnerabilities in their software and products.Wed, 09 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-115urn:isomer:resource:405286Attackers are exploiting a critical vulnerability in NetScaler ADC and NetScaler Gateway. Patch immediately.Mon, 07 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-114urn:isomer:resource:404776Attackers are exploiting vulnerabilities in SonicWall SMA1000 Series appliances to gain unauthorised access to sensitive functionalities and execute arbitrary operating system (OS) commands.Fri, 04 Sep 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-113urn:isomer:resource:403311Attackers are exploiting multiple vulnerabilities in Microsoft SharePoint Server to bypass a security feature and run code over a network. Patch immediately.Fri, 28 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-112urn:isomer:resource:402990Attackers can exploit a critical vulnerability in Apache Tomcat to bypass security constraints and gain unauthorised access to protected resources. Patch immediately.Thu, 27 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-111urn:isomer:resource:402298Attackers are exploiting a critical vulnerability in Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-In to access, change or delete critical data. Patch immediately.Wed, 26 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-110urn:isomer:resource:402278Two vulnerabilities have been discovered in the privileged access management application “Admin By Request” (ABR). The product owner has rolled out fixes for both reported vulnerabilities. Special thanks to the researchers and ABR for coordinating through CSA's Responsible Vulnerability Disclosure Policy.Wed, 26 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-109urn:isomer:resource:401331Attackers can exploit a high-severity vulnerability in Zimbra Collaboration Suite to achieve remote code execution. Patch immediately. Fri, 21 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-108urn:isomer:resource:394142Attackers can exploit multiple vulnerabilities in Zoom products to perform remote code execution, denial of service or disclose sensitive information. Users and administrators of affected products are advised to apply the latest security updates promptly.Thu, 20 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-107urn:isomer:resource:393804Attackers can exploit multiple vulnerabilities in HPE Aruba Networking Private 5G Core affecting third-party components Traefik and Grafana to spoof identities and escalate privileges. Patch promptly.Tue, 18 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-106urn:isomer:resource:393801Attackers are exploiting a vulnerability in Cisco Secure Firewall ASA and FTD to cause the affected device to reload unexpectedly, resulting in a denial of service condition. Patch immediately.Tue, 18 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-105urn:isomer:resource:393799Attackers can exploit multiple vulnerabilities in Fortinet FortiWeb, FortiClient Windows, FortiManager, and FortiManager Cloud to bypass authentication, gain unauthorised access or execute arbitrary code. Patch promptly.Tue, 18 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-104urn:isomer:resource:393797Attackers can exploit multiple vulnerabilities in SAP products to execute arbitrary code, disclose sensitive information or crash affected systems. Patch immediately.Tue, 18 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-103urn:isomer:resource:392093Microsoft has released security patches to address multiple vulnerabilities in their software and products.Wed, 12 Aug 2026 00:00:00 +0800Monthly Patch https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-102urn:isomer:resource:390568Attackers can exploit a missing encryption vulnerability in Apache Tomcat to bypass the EncryptInterceptor, potentially exposing sensitive data transmitted between cluster nodes. Patch immediately.Fri, 07 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-101urn:isomer:resource:390567Multiple vulnerabilities have been identified in Cisco IOS XE Software that could allow attackers to execute arbitrary commands, bypass security controls, gain unauthorised access, disclose sensitive information, or affect the operation of vulnerable systems. Patch immediately.Fri, 07 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-100urn:isomer:resource:390530Attackers can exploit multiple vulnerabilities in Cisco Catalyst SD-WAN Software to bypass security controls, gain unauthorised access, access or manipulate files, and disclose sensitive information. Patch immediately.Fri, 07 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098urn:isomer:resource:389561Multiple vulnerabilities have been discovered in CatchPulse. SecureAge, the product owner, has rolled out fixes for all reported vulnerabilities. Special thanks to the informer and SecureAge for coordinating through CSA's Responsible Vulnerability Disclosure Policy.Thu, 06 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-099urn:isomer:resource:389921Attackers are actively exploiting a critical vulnerability in IBM Langflow OSS to achieve unauthenticated remote code execution (RCE). Users and administrators of affected products are advised to apply the latest security updates immediately. Thu, 06 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-097urn:isomer:resource:388886Authenticated attackers can exploit a critical vulnerability in cPanel & WHM to gain database root privileges and potentially compromise other customers hosted on the same server. Patch immediately.Wed, 05 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-096urn:isomer:resource:388798Attackers can exploit multiple vulnerabilities in VMware products to bypass authentication, execute arbitrary code, access sensitive information or cause denial-of-service. Patch immediately.Wed, 05 Aug 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-095urn:isomer:resource:386957Attackers are exploiting a medium-severity vulnerability in Cisco Secure Firewall Management Center to log in and access sensitive data. Patch immediately.Fri, 31 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-094urn:isomer:resource:383197Multiple vulnerabilities have been discovered in Koollab's Learning Management System (LMS). Three Learning, the product owner, has rolled out fixes for all reported vulnerabilities across all cloud-hosted instances of the LMS. Special thanks to the researchers from Centre for Strategic Infocomm Technologies (CSIT) and Three Learning for coordinating through CSA's Responsible Vulnerability Disclosure Policy.Wed, 29 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-093urn:isomer:resource:370176A vulnerability has been discovered in EShare’s application. Special thanks to the informer and EShare for their involvement as part of CSA's Responsible Vulnerability Disclosure Policy.Tue, 28 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-092urn:isomer:resource:367887Attackers are exploiting a critical severity vulnerability in Langflow to execute arbitrary code. Users and administrators of affected products are advised to apply the latest security updates immediately.Fri, 24 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-091urn:isomer:resource:367609Attackers can exploit two critical vulnerabilities in SolarWinds Serv-U to perform remote code execution. Patch immediately.Thu, 23 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-090urn:isomer:resource:351126Attackers can exploit a critical-severity vulnerability in Zoom to conduct an account takeover via network access. Users and administrators of affected products are advised to apply the latest security updates immediatelyThu, 16 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-087urn:isomer:resource:349759Attackers can exploit critical vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud to gain unauthorised access, modify data and cause denial of service to affected systems. Patch immediately.Wed, 15 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-089urn:isomer:resource:349787Microsoft has released security patches to address multiple vulnerabilities in their software and products.Wed, 15 Jul 2026 00:00:00 +0800Monthly Patch https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-088urn:isomer:resource:349773Attackers are exploiting two zero-day vulnerabilities in the SMA1000 series appliances to perform server-side request forgery and execute arbitrary operating system commands. Patch immediately.Wed, 15 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-086urn:isomer:resource:347234CSA has issued a CVE ID to a vulnerability reported in WinFsp as part of CSA’s Responsible Vulnerability Disclosure Policy. Users and administrators of the affected product versions are advised to update to the latest version immediately. Mon, 13 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-085urn:isomer:resource:346931Attackers are exploiting critical vulnerabilities in Joomla's SP Page Builder and Page Builder CK extensions to upload malicious files and execute arbitrary code. Patch immediately.Fri, 10 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-084urn:isomer:resource:346729Attackers can exploit multiple vulnerabilities in BeyondTrust's Remote Support and Privileged Remote Access products to bypass access controls and gain unauthorised access, cause a denial of service, or access unintended resources. Patch immediately.Thu, 09 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-083urn:isomer:resource:346656Attackers are exploiting a critical vulnerability in Gitea Docker images to gain unauthorised access to Gitea instances. Patch immediately.Wed, 08 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-082urn:isomer:resource:342848Attackers can exploit multiple vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway to read arbitrary files, trigger denial-of-service conditions, and disclose sensitive memory contents. Patch immediately.Thu, 02 Jul 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-080urn:isomer:resource:307732Attackers can exploit high-severity vulnerabilities in NGINX to cause worker process crashes and, under certain conditions, achieve remote code execution. Patch immediately.Fri, 19 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-081urn:isomer:resource:307755Attackers can exploit multiple vulnerabilities in Cisco Identity Services Engine to execute arbitrary commands on the underlying operating system and disclose sensitive information. Patch immediately.Fri, 19 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-079urn:isomer:resource:307706Attackers can exploit multiple vulnerabilities in Oracle Solaris to compromise affected systems, gain unauthorised access to critical data and cause denial of service. Patch immediately.Thu, 18 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-078urn:isomer:resource:307425Attackers can exploit critical vulnerabilities in MariaDB Community Server to execute arbitrary shell commands on the affected system. Patch immediately.Wed, 17 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-076urn:isomer:resource:306674Attackers can exploit multiple high-severity vulnerabilities in GitLab to achieve account takeover, cause denial of service, add unauthorised email addresses and execute arbitrary client-side code. Patch immediately.Tue, 16 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-077urn:isomer:resource:306787Attackers are exploiting a vulnerability in Cisco Catalyst SD-WAN Manager to overwrite files on the underlying filesystem and escalate privileges to root. Patch immediately.Tue, 16 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-074urn:isomer:resource:305818Attackers can exploit OS command injection (CVE-2026-10520) and authentication bypass (CVE-2026-10523) vulnerabilities in Ivanti Sentry to execute commands as root, create unauthorised administrative accounts, and gain full system administrative control without authentication. Patch immediately.Fri, 12 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-075urn:isomer:resource:305820Attackers can exploit critical vulnerabilities in SAP NetWeaver and SAP Commerce Cloud to gain unauthorised access and compromise affected systems. Users and administrators are advised to patch immediately.Fri, 12 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-073urn:isomer:resource:305817Attackers can exploit a critical vulnerability in Fortinet FortiSandbox via HTTP requests to execute unauthorised commands on the affected system. Patch immediately. Fri, 12 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-072urn:isomer:resource:305814Oracle has released security updates to address a critical vulnerability in Oracle PeopleSoft Enterprise PeopleTools that could allow unauthenticated attackers to perform remote code execution and fully compromise the affected system. Patch immediately.Fri, 12 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-071urn:isomer:resource:291576Microsoft has released security patches to address multiple vulnerabilities in their software and products.Wed, 10 Jun 2026 00:00:00 +0800Monthly Patch https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-070urn:isomer:resource:289550Attackers are actively exploiting a critical vulnerability in Check Point VPN to bypass authentication and gain unauthorised remote access. Apply security updates immediately.Tue, 09 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-069urn:isomer:resource:283995Attackers are exploiting a vulnerability in SolarWinds Serv-U to crash the file transfer service without authentication, causing a denial of service condition. Patch immediately.Tue, 09 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-067urn:isomer:resource:270374Cisco released security updates to fix a critical vulnerability in Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition. Attackers can gain root privileges by exploiting the vulnerabilities. Users of affected products are advised to update to the latest versions immediately.Fri, 05 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-066urn:isomer:resource:270372Mirasvit released a security update addressing a critical vulnerability in the Full Page Cache Warmer extension for Magento 2. Users and administrators of affected products are advised to update to the latest versions immediately.Fri, 05 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-068urn:isomer:resource:270394Attackers are exploiting a 2022 vulnerability in the Linux kernel to escalate privileges and escape containerised environments to compromise underlying hosts. Patch immediately.Fri, 05 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-065urn:isomer:resource:269973Oracle has released security updates to address multiple vulnerabilities across several Oracle products that could allow unauthenticated attackers to compromise and take over affected systems. Users and administrators of affected products are advised to update to the latest versions immediately.Wed, 03 Jun 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-064urn:isomer:resource:264511Palo Alto Networks has identified a critical vulnerability affecting the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS software and Prisma Access that allows attackers to establish unauthorised VPN connections. Users and administrators of affected product versions are advised to update to the latest versions immediately. Sun, 31 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-062urn:isomer:resource:264367A critical vulnerability in Langflow discovered in December 2025 is now under active exploitation. Users and administrators are advised to update to the latest version immediately. Fri, 29 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-063urn:isomer:resource:264368Microsoft has released security updates addressing a remote code execution vulnerability in SharePoint. Users and administrators of affected products are advised to update to the latest versions immediately. Fri, 29 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-060urn:isomer:resource:263934Drupal security team has released a security update to address a critical Structured Query Language (SQL) Injection vulnerability in Drupal core affecting multiple supported branches. Users and administrators of affected versions are advised to update to the latest patched versions immediately.Tue, 26 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-061urn:isomer:resource:263935LiteSpeed Technologies has released security updates addressing an Incorrect Privilege Assignment vulnerability in the LiteSpeed User-End cPanel Plugin. Users and administrators of affected versions are advised to update to the latest version immediately. Tue, 26 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-059urn:isomer:resource:263923Ubiquiti has released security updates to address multiple critical vulnerabilities in UniFi OS. Users and administrators of affected products are advised to update to the latest versions immediately.Tue, 26 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-058urn:isomer:resource:263371Cisco has released security updates addressing multiple vulnerabilities affecting multiple Cisco products. Users and administrators of affected products are advised to update to the latest versions immediately.Fri, 22 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-057urn:isomer:resource:263277n8n has released security updates to address multiple vulnerabilities in n8n open-source workflow automation platform. Users and administrators of affected products are advised to update to the latest versions immediately.Fri, 22 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-056urn:isomer:resource:253415F5 has released security updates to address multiple vulnerabilities in NGINX, BIG-IP, and BIG-IQ. Users and administrators of affected products are advised to update to the latest versions immediately.Mon, 18 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-055urn:isomer:resource:252857Cisco has released security updates to address a critical vulnerability in Cisco Catalyst SD-WAN Controller. Users and administrators of affected products are advised to update to the latest versions immediately.Fri, 15 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-054urn:isomer:resource:252835Fortinet has released security updates to address critical vulnerabilities in FortiAuthenticator and FortiSandbox. Users and administrators of affected products are advised to update to the latest versions immediately.Fri, 15 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-053urn:isomer:resource:252723Palo Alto Networks has released security updates to address critical vulnerabilities in PAN-OS. Users and administrators of affected products are advised to update to the latest versions immediately.Thu, 14 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-051urn:isomer:resource:249192SAP has released security updates to address critical vulnerabilities in SAP Commerce Cloud and SAP S/4HANA. Users and administrators of affected products are advised to update to the latest versions immediately.Wed, 13 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-052urn:isomer:resource:250026Microsoft has released security patches to address multiple vulnerabilities in their software and products.Wed, 13 May 2026 00:00:00 +0800Monthly Patch https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-050urn:isomer:resource:247282CSA has issued a CVE ID to a vulnerability reported in Advantech products as part of CSA’s Responsible Vulnerability Disclosure Policy. Users and administrators of affected product versions are advised to update to the latest versions immediately. Wed, 13 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-049urn:isomer:resource:230898Apache Software Foundation has released security updates to address a high severity vulnerability in the Apache HTTP Server. Users and administrators of the affected product are advised to update to the latest version immediately.Thu, 07 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-048urn:isomer:resource:230815Palo Alto Networks has identified a critical vulnerability affecting User-ID Authentication Portal (also known as Captive Portal) service of Palo Alto Networks PAN-OS software. Users and administrators of affected product versions are advised to restrict or disable portal access until security updates are available.Wed, 06 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-046urn:isomer:resource:227656cPanel has released security updates to address a critical vulnerability in cPanel, WebHost Manager (WHM) and Wordpress Squared (WP2). Users and administrators of affected products are advised to update to the latest versions immediately.Mon, 04 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-047urn:isomer:resource:227733A security update has been released to address a high severity vulnerability in the Linux kernel. Users and administrators of affected products are advised to update to the latest versions immediately.Mon, 04 May 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-045urn:isomer:resource:218825Open SecureShell (OpenSSH) has released a security update to address a high severity vulnerability in OpenSSH. The vulnerability has a Common Vulnerability Scoring System (CVSS v3.1) score of 8.1 out of 10. Users and administrators of affected products are advised to update to the latest versions immediately.Thu, 30 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-044urn:isomer:resource:216128CSA has issued a CVE ID to a vulnerability reported in Notepad++ as part of CSA's Responsibility Vulnerability Disclosure Policy. Users and administrators of the affected product version are advised to update to the latest version 8.9.4 immediately. Mon, 27 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-043urn:isomer:resource:216124CSA has issued a CVE ID to a vulnerability reported in WinFsp as part of CSA’s Responsible Vulnerability Disclosure Policy. Users and administrators of the affected product version are advised to update to the latest version immediately. Mon, 27 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-042urn:isomer:resource:202794CSA has issued a CVE ID to a vulnerability reported in Koollab LMS as part of CSA’s Responsible Vulnerability Disclosure Policy. Users and administrators of the affected product version are advised to update to the latest version 5.4.0 immediately. Thu, 23 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-041urn:isomer:resource:202655A critical vulnerability has been identified in protobuf.js, a JavaScript implementation of Google’s Protocol Buffers. Users and administrators of affected products are advised to update to the latest versions immediately.Tue, 21 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-040urn:isomer:resource:201940Cisco has released security updates to address multiple security vulnerabilities in two of its products: Identity Services Engine (ISE) and Webex Services. There are no indications that these vulnerabilities are being exploited in the wild when this alert is reported. However,successful exploitation of these vulnerabilities may result in gaining root access and remote code execution. Users and administrators of affected products are advised to update to the latest versions immediately.Fri, 17 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-039urn:isomer:resource:197835Nginx-UI has released a security advisory addressing a vulnerability affecting Nginx-UI with Model Context Protocol (MCP) support.This vulnerability is being exploited in the wild. Successful exploitation of this vulnerability can allow any network attacker to invoke all MCP tools without authentication and lead to a complete NGINX service takeover. Users and administrators of affected products are advised to update to the latest version immediately.Fri, 17 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-038urn:isomer:resource:193938Fortinet has released software updates addressing vulnerabilities in FortiSandbox.Users and administrators of affected products are advised to update to the latest versions immediately.Thu, 16 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-037urn:isomer:resource:193931Axios has released a software patch to address a critical security vulnerability in the Axios library. Users and administrators of affected product versions are advised to update to the latest version immediately.Thu, 16 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-036urn:isomer:resource:193773Microsoft has released security patches to address multiple vulnerabilities in their software and products.Wed, 15 Apr 2026 00:00:00 +0800Monthly Patch https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-035urn:isomer:resource:193377Adobe has released a security update to address a critical vulnerability in Adobe Acrobat and Reader. Users and administrators of affected products are advised to update to the latest versions immediately.Mon, 13 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-034urn:isomer:resource:193372Apache has released security updates to address a critical vulnerability in Apache ActiveMQ Classic. Users and administrators of affected products are advised to update to the latest versions immediately.Mon, 13 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-033urn:isomer:resource:193369SonicWall has released security updates to address multiple vulnerabilities in the SMA1000 series appliances. Users and administrators of affected products are advised to update to the latest version immediately.Mon, 13 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-032urn:isomer:resource:184366F5 has released security updates to address a critical vulnerability in BIG‑IP Access Policy Manager (APM). Users and administrators of affected products are advised to update to the latest versions immediately.Mon, 06 Apr 2026 00:00:00 +0800Alerts https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-031urn:isomer:resource:183844Fortinet has released security updates to address a critical security vulnerability in FortiClient EMS. Users and administrators of affected versions are advised to install the hotfix immediately and update to the latest version once available.Mon, 06 Apr 2026 00:00:00 +0800Alerts