Get alerted about vulnerabilities that affect your stack.
Sign up free to get alerts when software you use is affected.
CVE Vulnerabilities - 30 September 2026
RSS2 vulnerabilities published on 30 September 2026
Zammad can let attackers hijack sessions and run code
CVE-2026-102489
The Zammad help‑desk system lets a user’s session be taken over by an attacker, who can then run commands on the server as the Zammad service account. This could let the attacker control the system re...
9.4
KEV
Cisco Catalyst SD-WAN Manager lets remote attacker gain admin access
CVE-2026-76504
The SD-WAN Manager software can be tricked by a specially crafted web request, allowing someone on the network to log in without a password and act as an administrator. This could let an attacker chan...
9.8
KEV