U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog
2026-10-03T02:51:38Z•ad0391fde40812cfa73279e81e2accbf491eef53db481cdff54b336816c538f8
CVE-2026-102489CVE-2026-104286CVE-2026-76504CVE-2026-86131CVE-2026-86950AI-agentsApple-CoreGraphicsCISACisco-Catalyst-SD-WANFortinet-FortiMailSQL-injectionWatchGuard-FirewareZammadactive-exploitationknown-exploited-vulnerabilitiespath-traversalpublic-pocransomwareremote-code-executionsession-hijackingvulnerability-managementzero-day
What happened
SecurityAffairs reports active exploitation and disclosure of multiple 2026 vulnerabilities, including CISA KEV additions affecting Zammad, Fortinet FortiMail, and Cisco Catalyst SD-WAN Manager. Additional coverage includes an exploited Apple CoreGraphics zero-day with a public proof of concept, a critical WatchGuard Fireware OS remote-code-execution flaw, ransomware-group disruption, and AI agents conducting reconnaissance and SQL injection attempts against government systems.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- ad0391fde40812cfa73279e81e2accbf491eef53db481cdff54b336816c538f8
- Enrichment time
- 2026-10-03T02:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.