CISA Adds Two Zammad Flaws to KEV

CISA adds two Zammad flaws to KEV

CISA has added Known Exploited Vulnerabilities entries CVE-2026-102489 and CVE-2026-102490 affecting Zammad. The first is a session fixation issue that can lead to remote code execution as the zammad user; the second is a local privilege...

U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog. The U.S.… Read more →

U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini October 02, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Fortinet FortiMail flaw, tracked as CVE-2026-104286 (CVSS score of 9.8), to its Known

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Adds Two Known Exploited Vulnerabilities to Catalog ggaylor Oct 02, 2026 Release DateOctober 02, 2026 DescriptionCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.CVE-2026-102489 Zammad GmbH Zammad Session Fixation VulnerabilityCVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management VulnerabilityThese types of vulnerabilities are frequent attack v…