Early March 2026 Vendor Security Advisories and Patch Releases Across Enterprise, Mobile, and ICS Products
Multiple vendors issued security advisories and patch releases in late February and early March 2026, prompting coordinated update guidance from national and regional CERTs. The Canadian Centre for Cyber Security highlighted updates for Django (fixed in 4.2.29, 5.2.12, 6.0.3), Samsung mobile devices (March 2026 security update), Qualcomm (March 2026 monthly bulletin), Veeam Kasten for Kubernetes / Kasten K10, VMware Tanzu components (including Greenplum and RabbitMQ on Kubernetes), and Red Hat advisories including Linux kernel updates across multiple RHEL-related platforms.
Industrial and infrastructure-facing products were also covered via CISA ICS advisories spanning a broad set of vendors and solutions (including EV charging ecosystems, building management, cameras, and DCS/SCADA platforms such as Schneider Electric EcoStruxure Building Operation Workstation and Yokogawa CENTUM VP), with guidance to apply mitigations and updates where available. Additional enterprise patch guidance included Dell advisories affecting PowerStore T and PowerEdge server lines (including AMD-based models and NVIDIA networking/DOCA-related components), and IBM advisories across a wide portfolio (including App Connect Enterprise, CICS TX, License Metric Tool, Maximo, Sterling Secure Proxy, Terracotta, QRadar, and others). HKCERT separately summarized Samsung vulnerabilities impacting Android devices and Exynos chipsets, listing multiple CVEs (e.g., CVE-2024-31328 and numerous 2025-series CVEs) with potential impacts including RCE, EoP, information disclosure, and DoS.
Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
9 events from the most recent confirmed update back to the earliest known activity.
Django publishes security advisory for supported release lines
On 2026-03-03, Django published a security advisory covering vulnerabilities in supported release lines, including Django 4.2 before 4.2.29, Django 5.2 before 5.2.12, and Django 6.0 before 6.0.3. The advisory instructed users to review the notice and update to fixed versions.
Samsung publishes mobile device security update
On 2026-03-03, Samsung released a security update for mobile devices addressing multiple vulnerabilities affecting versions prior to SMR-MAR-2026. Users and administrators were directed to Samsung's security update information for remediation details.
Qualcomm publishes March 2026 security bulletin
On 2026-03-02, Qualcomm published its March 2026 security bulletin addressing vulnerabilities affecting Qualcomm products. The bulletin served as the primary source of remediation guidance referenced by subsequent advisories.
Veeam publishes Kasten for Kubernetes security advisory
On 2026-03-02, Veeam released a security advisory addressing vulnerabilities in multiple versions of Veeam Kasten for Kubernetes and Kasten K10 by Veeam. The vendor provided references to security fixes, improvements, and additional knowledge base details.
VMware releases Tanzu product security advisories
On 2026-02-27, VMware published security advisories for multiple Tanzu products, including Tanzu Greenplum, Greenplum Upgrade, Greenplum Backup and Restore, and Tanzu RabbitMQ on Kubernetes. The advisories identified fixed-version thresholds for several affected components.
Dell publishes multiple security advisories across product lines
Between 2026-02-23 and 2026-03-01, Dell released multiple advisories for vulnerabilities affecting products including PowerStore T Security, PowerEdge servers, and NVIDIA BlueField, ConnectX, and DOCA-related components. The advisories specified affected versions and directed customers to apply updates.
CISA issues multiple ICS security advisories
Between 2026-02-23 and 2026-03-01, CISA published several ICS advisories covering vulnerabilities in products such as EV charging platforms, industrial control software, building management systems, and IP cameras. The advisories identified affected vendors and versions and recommended mitigations and updates where available.
IBM publishes multiple product security advisories
Between 2026-02-23 and 2026-03-01, IBM published multiple security advisories affecting a broad range of products, including data platforms, middleware, automation, identity governance, storage management, and security monitoring offerings. The advisories provided remediation guidance and updates for affected systems.
Red Hat publishes multiple product security advisories
Between 2026-02-23 and 2026-03-01, Red Hat released security advisories covering vulnerabilities across multiple products, including the Linux kernel, Red Hat Enterprise Linux, and related variants. Users were advised to review the advisories and apply the relevant updates.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
10 references tracked. Mallory keeps watching after this page renders.
Django security advisory (AV26-193) - Canadian Centre for Cyber Security
cyber.gc.ca
Open sourceSamsung mobile security advisory (AV26-192) - Canadian Centre for Cyber Security
cyber.gc.ca
Open sourceQualcomm security advisory - March 2026 monthly rollup (AV26-190) - Canadian Centre for Cyber Security
cyber.gc.ca
Open sourceSamsung Products Multiple Vulnerabilities
hkcert.org
Open sourceRed Hat security advisory (AV26-184) - Canadian Centre for Cyber Security
cyber.gc.ca
Open source[Control systems] CISA ICS security advisories (AV26-183) - Canadian Centre for Cyber Security
cyber.gc.ca
Open sourceDell security advisory (AV26-181) - Canadian Centre for Cyber Security
cyber.gc.ca
Open sourceIBM security advisory (AV26-180) - Canadian Centre for Cyber Security
cyber.gc.ca
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Related stories
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Canadian Cyber Centre Flags Broad Vendor Patch Wave Across Enterprise and ICS Products
The Canadian Centre for Cyber Security issued a series of advisories highlighting a broad patch wave from major technology vendors, spanning enterprise infrastructure, operating systems, and industrial environments. IBM released updates for products including **AIX**, **MQ**, **QRadar Suite Software**, **Cloud Pak for Security**, multiple **IBM Verify** offerings, and other middleware and cloud components, while Dell published fixes affecting **Avamar Data Store Gen5A**, **Connectrix B-Series FOS and SANnav**, **PowerSwitch E3200-ON Series**, **PowerSwitch Z9664F-ON**, and **Secure Connect Gateway**. Red Hat and Ubuntu also pushed Linux kernel-related updates, with Red Hat covering several **RHEL** and **CodeReady Linux Builder** variants and Ubuntu addressing kernel issues in **Ubuntu 22.04 LTS** and **24.04 LTS**, including NVIDIA-related vulnerabilities referenced in `USN-8060-7` and `USN-8059-8`. Industrial and telecom systems were also affected. CISA advisories cited vulnerabilities across products from **Apeman, Ceragon, Honeywell, Inductive Automation, Lantronix, Siemens,** and **Trane**, impacting industrial control systems, building management platforms, EV chargers, networking devices, and industrial software. Separately, HPE disclosed a **remote buffer overflow** in **HPE Telco Service Orchestrator** affecting versions prior to `v4.2.12` under bulletin `HPESBNW05029` revision 1. The Cyber Centre urged organizations to review vendor guidance, implement recommended mitigations, and apply updates promptly to reduce exposure across both IT and OT environments.
Jun 22, 2026
Canadian Cyber Centre Advisories Highlight Linux Kernel and Other Vendor Patch Updates
The Canadian Centre for Cyber Security issued multiple advisories urging organizations to apply vendor patches released between **February 16–22, 2026**, including updates addressing **Linux kernel vulnerabilities** impacting **Ubuntu** (16.04 LTS through 25.10) and **Red Hat** platforms (including *RHEL* and related offerings). The advisories emphasize routine but potentially high-impact exposure from unpatched kernel flaws across widely deployed enterprise and server environments, and direct administrators to review upstream vendor notices and deploy the corresponding updates. Separate Cyber Centre advisories also flagged patch requirements outside the Linux kernel: Microsoft released an update for **Microsoft Edge Stable** to remediate vulnerabilities in versions prior to `145.0.3800.70`, IBM published security advisories covering multiple products (including *Aspera Enterprise WebApps*, *Cloud Pak System*, *Storage Defender*, and others), and CISA issued ICS advisories for vulnerabilities across several industrial and IoT/OT products (including **Delta Electronics**, **GE Vernova**, **Honeywell CCTV**, **Siemens Simcenter**, and others) with recommended mitigations and updates where available. A Linux 7.0 release-candidate feature article is not a security advisory and does not materially relate to the patch/vulnerability notices in the other items.
Mar 21, 2026
Multiple Security Advisories for Enterprise and Industrial Products (Late October–Early November 2025)
Vendors including Hitachi Energy, Schneider Electric, ABB, Ubiquiti, Dell, IBM, Red Hat, Ubuntu, and Microsoft released security advisories between October 27 and November 3, 2025, addressing vulnerabilities across a wide range of enterprise, industrial, and cloud products. Notable advisories include CISA's ICS alerts for control systems, a critical flaw in ABB's PCM600 software (CVE-2018-1002208), a critical vulnerability in Ubiquiti's UniFi Access Application (CVE-2025-52665), and updates for Microsoft Edge, Red Hat Enterprise Linux, Ubuntu LTS versions, and multiple Dell and IBM products. Organizations are urged to review the advisories, apply recommended mitigations, and update affected systems to reduce exposure to exploitation. The advisories highlight vulnerabilities that could allow remote code execution, privilege escalation, or unauthorized access if left unpatched. The Canadian Centre for Cyber Security and CISA emphasize the importance of timely patching and mitigation, especially for products deployed in critical infrastructure and enterprise environments. Administrators should consult the official vendor advisories for detailed remediation steps and monitor for further updates as new vulnerabilities are disclosed and addressed.
Mar 21, 2026