U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog

Security news covering multiple actively exploited and critical vulnerabilities, including Zammad session hijacking leading to remote code execution, Fortinet FortiMail path traversal, Cisco Catalyst SD-WAN Manager flaws, an Apple CoreGraphics zero-day with public proof of concept, and a WatchGuard Fireware OS command-injection vulnerability. The feed also reports ransomware disruption and malicious or uncontrolled AI-agent reconnaissance and SQL injection activity against government and nonprofit systems.