Known Exploited Vulnerabilities October 02, 2026 · CISA KEV Catalog

CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability

Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-102489 Zammad GmbH
Related: CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability Known Exploited Vulnerabilities · Oct 02, 2026
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026