Service Advisory Notification
Staying informed. Staying protected.
Nexon is committed to keeping customers informed of security advisories, platform updates, and recommended actions that may impact the services and technologies used within your environment.
This page provides a central source of information for significant security alerts, vendor advisories, platform updates, and risk mitigation guidance across the solutions we support. Our objective is to help you understand what has occurred, what it means for your organisation, and any actions that may be required to maintain a secure and resilient environment.
Current advisory overview
The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has issued a Critical Alert regarding two newly disclosed PHP vulnerabilities that may affect PHP versions from PHP 5 onwards.
As these vulnerabilities have the potential to impact platforms that utilise PHP components, Nexon has reviewed available guidance and is actively monitoring updates from both the PHP Foundation and the ASD’s ACSC.
In addition to this advisory, we are providing a consolidated view of key security updates, vendor advisories, and technology recommendations to help strengthen your security posture and reduce organisational risk.
Service outage
Friday, 13 November 2026
Microsoft 365 service outage
A global Microsoft 365 outage is stopping some users from connecting to Outlook, Teams, SharePoint, OneDrive and Copilot.
This is a Microsoft issue, not your environment. Microsoft is restoring services and we’ll update you as information becomes available.
Security update
Thursday, 12 November 2026
Critical Fortinet Vulnerabilities
Nexon is advising customers of critical vulnerabilities affecting certain Fortinet FortiManager, FortiAnalyzer and FortiOS products. Customers should review affected versions and configurations and prioritise security updates for exposed systems.
Security update
Wednesday, 11 November 2026
Microsoft Security Update
Microsoft has issued its November 2026 security updates, addressing critical vulnerabilities across Windows, Microsoft 365, Azure, Exchange, SharePoint, SQL Server and other widely used technologies. Nexon is assessing managed customer environments and recommends prioritising critical vulnerabilities and applying relevant security updates as soon as practical to reduce potential exposure.
Security update
Monday, 2 November 2026
PHP2Shell, Brotli, eMudhra and a Visual Studio | Microsoft Update
Microsoft has issued guidance on critical security vulnerabilities affecting PHP, Brotli, eMudhra certificates and Visual Studio, which may require urgent updates across affected systems. Nexon is assessing managed customer environments and recommends prioritising patching and updates to reduce potential security exposure.
Security updates
Saturday, 24 October 2026
PHP RCE Vector Vulnerability
Nexon is making customers aware of CVE-2026-115560, a newly disclosed PHP vulnerability that may allow remote code execution under specific configurations.
No active exploitation has been publicly reported. Nexon recommends keeping PHP versions current, reviewing custom session handling configurations and applying PHP’s recommended mitigation where appropriate.
Node.js Security Updates
Nexon is making customers aware of newly released Node.js security updates addressing multiple vulnerabilities affecting TLS certificate validation, DNS processing and Brotli compression handling.
Security updates are now available, and Nexon recommends customers review applications and services using Node.js and upgrade to the latest vendor-supported security release applicable to their environment. Nexon is also reviewing managed environments for affected versions and will undertake remediation where required.
Security updates
Thursday, 22 October 2026
Self-Hosted PBXware Customers
As a precaution, Nexon strongly recommends applying the latest security patch provided by vendor as soon as possible.
The temporary patch is designed to reduce the risk of exploitation while maintaining normal telephony operations. Following deployment, the PBXware management interface (GUI) will operate in read-only mode until a permanent vendor fix is available.
Security hardening - Fortinet
Fortinet announced a coordinated release of security updates for FortiOS, FortiManager, and FortiAnalyzer, following recent security releases for FortiMail and FortiAuthenticator. 22nd October 2026.
Given the severity of the vulnerabilities addressed across the Fortinet platform, Nexon strongly recommends that customers review their environments and plan to deploy these updates as a priority once they become available. Particular attention should be given to internet-facing devices, which may present a higher risk if left unpatched.
Palo Alto Networks Security Update
Palo Alto Networks has disclosed a high-severity vulnerability (CVSS 8.6) affecting certain PAN-OS management interfaces. Prioritise patching affected PA-Series, VM-Series, and Panorama systems.
Security update
Tuesday, 20 October 2026
Incident affecting certain Genesys internal business systems
Genesys has advised that it recently identified and contained unauthorised activity within certain internal business systems. Following its investigation, Genesys confirmed that Genesys Cloud, Genesys Engage, and Genesys Engage Cloud were not compromised, and that there was no unauthorised access to customer or partner environments or data.
Security update
Saturday, 17 October 2026
Cisco Meraki security hardening release
Cisco has released a security hardening update for multiple Meraki product families, addressing several vulnerabilities rated up to Critical severity. While Cisco has confirmed there is currently no known active exploitation, affected organisations are encouraged to upgrade to the recommended software versions as soon as practical to reduce potential risk.
Ongoing updates
Nexon continues to monitor this situation and assess any impact. As further vendor guidance, validated fixes, or additional recommendations become available.
This page will be continuously updated as new information and security guidance are released.