Cyber Centre Daily Advisory Digest — 2026-05-28 (4 advisories)

What Happened

The Canadian Centre for Cyber Security issued alerts about security flaws in several popular software products, including Drupal, Veeam, Zimbra, and Notepad++. These flaws could potentially allow attackers to compromise systems if left unpatched, with the Drupal flaw being particularly critical. It is important because these tools are widely used for website management, data backups, email, and text editing. Organizations should immediately apply the latest updates provided by the respective software vendors to protect their networks.

Key Takeaways

• Drupal released a patch for a highly critical arbitrary PHP code execution vulnerability in the AlternativeCommerce (Basket) module.
• Veeam issued security updates for multiple backup and recovery products across AWS, Google Cloud, and Azure environments.
• Zimbra patched vulnerabilities in Daffodil versions prior to v10.1.17.
• Notepad++ addressed vulnerabilities in version v8.9.6.1 and prior.

Affected Systems

• Drupal AlternativeCommerce (Basket) versions prior to 2.1.17
• Veeam Backup for AWS 10.1 versions prior to 10.1.0.40
• Veeam Backup for Google Cloud 7.0.1 versions prior to 7.0.1.4
• Veeam Backup for Microsoft Azure 8.1 Patch 2 versions prior to 8.0.236
• Veeam Recovery Orchestrator versions prior to 13.0.2.27
• Zimbra Daffodil versions prior to v10.1.17
• Notepad++ version v8.9.6.1 and prior

Detection Availability

• YARA Rules: No
• Sigma Rules: No
• Snort/Suricata Rules: No
• KQL Queries: No
• Splunk SPL Queries: No
• EQL Queries: No
• Other Detection Logic: No

N/A

Detection Engineering Assessment

EDR Visibility: None — The advisory only lists vulnerabilities and patches without providing exploitation details or behavioral indicators. Network Visibility: None — No network indicators or traffic patterns are provided in the advisory. Detection Difficulty: Hard — Without specific CVE details or exploitation TTPs, detection relies entirely on vulnerability scanning rather than behavioral monitoring.

Required Log Sources

• Vulnerability Management Scanners
• Patch Management Systems

Control Gaps

• Vulnerability Management

False Positive Assessment

• Low

Recommendations

Immediate Mitigation

• Verify against your organization's incident response runbook and team escalation paths before acting.
• Identify and patch all instances of Drupal AlternativeCommerce (Basket) to version 2.1.17 or later to mitigate the arbitrary PHP code execution flaw.
• Apply the latest security updates for Veeam Backup products (AWS, Google Cloud, Azure) and Recovery Orchestrator.
• Update Zimbra Daffodil to version v10.1.17 or later.
• Update Notepad++ to a version later than v8.9.6.1.

Infrastructure Hardening

• Implement a robust vulnerability management program to track and patch third-party software and plugins.
• Ensure backup infrastructure (Veeam) is isolated and access is strictly controlled.

User Protection

• Ensure endpoint management tools automatically update desktop applications like Notepad++.

Security Awareness

• Educate system administrators on the importance of subscribing to vendor security advisories and applying patches promptly.