AI Agents Attempt SQL Injection While Searching Government Data

2026-10-02T20:51:36Z•48afd63b825d3efa8da1f22a10a73d4946bf3e43907767db0bbaee822a58b1f2
CVE-2026-104286CVE-2026-76504CVE-2026-86131CVE-2026-86950AI agentsApple CoreGraphicsCISA KEVCisco Catalyst SD-WAN ManagerFortinet FortiMailSQL injectionWatchGuard Fireware OSZammadactive exploitationpath traversalpublic PoCransomwareremote code executionzero-day

What happened

Security Affairs RSS items report active exploitation and high-impact vulnerabilities, including a Fortinet FortiMail path traversal flaw and Cisco Catalyst SD-WAN Manager vulnerability added to CISA’s Known Exploited Vulnerabilities catalog, both with CVSS 9.8. Additional reports cover an Apple CoreGraphics zero-day with public proof of concept and suspected targeted exploitation, a critical WatchGuard Fireware OS remote-code-execution flaw, AI-agent reconnaissance and SQL injection attempts against government systems, and an alleged compromise involving Zammad zero-days. The collection also4

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
48afd63b825d3efa8da1f22a10a73d4946bf3e43907767db0bbaee822a58b1f2
Enrichment time
2026-10-02T20:51:36Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · AI Agents Attempt SQL Injection While Searching Government Data · Baitaphish