AI Agents Attempt SQL Injection While Searching Government Data
2026-10-02T14:51:37Z•2e87555f3bfca2bbf5c318b1b582648857c1819447b20ed965e3e7550ef61385
CVE-2026-104286CVE-2026-76504CVE-2026-86131CVE-2026-86950AI agentsApple CoreGraphicsCISA KEVCisco Catalyst SD-WAN ManagerFortinet FortiMailKillSecSQL injectionWatchGuard Fireware OSZammadautonomous cyber activitycyber espionagegovernment systemsknown exploited vulnerabilitieslaw enforcementpublic PoCransomwarereconnaissanceremote code executionsupply-chain riskzero-day
What happened
Security Affairs feed covering AI-agent reconnaissance and SQL injection attempts against government websites, ransomware-group disruption, supply-chain and cybercrime reporting, and multiple high-severity vulnerabilities. Notable issues include CISA KEV additions for Fortinet FortiMail (CVE-2026-104286, CVSS 9.8) and Cisco Catalyst SD-WAN Manager (CVE-2026-76504, CVSS 9.8), an exploited Apple CoreGraphics zero-day with public proof of concept (CVE-2026-86950), and a critical WatchGuard Fireware OS command-injection/RCE flaw (CVE-2026-86131, CVSS 9.2).
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 2e87555f3bfca2bbf5c318b1b582648857c1819447b20ed965e3e7550ef61385
- Enrichment time
- 2026-10-02T14:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.