Indexed vulnerabilities with severity, CVSS, and vendor context.
Cisco security advisories have been released for the five CVEs. Affected users should identify their NX-OS version and apply the relevant patches or software updates as specified in the advisories. It is recommended to monitor Cisco's security portal for updates and follow best practices for network device hardening, including restricting management access and applying the principle of least privilege.
Organizations should apply vendor-provided patches immediately. For Cisco ASA/FTD, consult Cisco security advisories. For Microsoft Windows, apply the latest security updates. For Metabase, follow the vendor's guidance. Additionally, review systems for indicators of compromise before patching, as recommended by BOD 26-04.
Rockwell Automation has released Redundancy Module Configuration Tool version 10.01.00 which addresses CVE-2026-9633 and CVE-2026-9634. Users are strongly advised to upgrade to the latest version immediately. Customers unable to upgrade should consult Rockwell Automation's security best practices and mitigation guidance published on the vendor's support portal and security advisories page. CISA recommends applying defensive measures outlined in advisory ICSA-26-244-02.
Apply the latest Adobe security updates for ColdFusion and Campaign Classic immediately. Verify all systems are running the patched versions. Monitor Adobe security advisories for additional details and scope of the addressed vulnerabilities.
Apply the latest GitLab patches immediately. For self-hosted instances, update to the patched version as specified in the GitLab security advisory. For GitLab.com, ensure the instance is up to date with the latest platform updates. Review file access permissions and restrict access to sensitive directories as a defense-in-depth measure.
As of the disclosure date, no patch information has been provided by Unitree. Organizations using the G1 EDU should monitor Unitree's official channels for firmware updates and security advisories. Until a patch is available, consider restricting network access to the robot and disabling Bluetooth when not in use. Additionally, ensure the robot is deployed in a controlled environment to minimize the risk of unauthorized physical or network access.
Organizations should upgrade NetBotz 5 750 and 755 to firmware version 5.6.0, available from Schneider Electric's product page. Additionally, follow vendor recommendations: isolate control networks, use firewalls, restrict physical access, and avoid connecting programming software to untrusted networks.
Organizations using Citrix NetScaler should apply the latest firmware updates as released by Citrix. Monitor official Citrix security advisories for CVE-2026-19490. If immediate patching is not possible, consider temporary network segmentation or access controls to limit exposure of NetScaler management interfaces. Ensure all NetScaler deployments are running the most recent supported software versions.
Update affected firmware to WTV676-HB6035 Web Interface V3.94 or later, or WTV776-HB6035 Web Interface V4.17 or later. Minimize network exposure by ensuring affected devices are not accessible from the internet. Locate control system networks behind firewalls and isolate from business networks. Use VPNs for remote access and keep VPNs and connected devices updated.
CISA recommends minimizing network exposure for all control system devices and ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolate them from business networks. Use VPNs for remote access, updated to the most current version. Perform proper impact analysis and risk assessment prior to deploying defensive measures. Contact PayRange customer support at support@payrange.com for additional information. Note: PayRange has not responded to requests to work with CISA to mitigate this vulnerability.
Rockwell Automation has released Redundancy Module Configuration Tool version 10.01.00 which addresses CVE-2026-9633 and CVE-2026-9634. Users are strongly advised to upgrade to the latest version immediately. Customers unable to upgrade should consult Rockwell Automation's security best practices and mitigation guidance published on the vendor's support portal and security advisories page. CISA recommends applying defensive measures outlined in advisory ICSA-26-244-02.
Apply Microsoft's August 2026 security updates promptly. Prioritize patching of Windows DNS Server components, especially on internet-facing systems. Monitor Microsoft security advisories for additional details and verification of the vulnerability specifics. Implement network segmentation and access controls for DNS server roles as defense-in-depth measures while awaiting patch deployment.