Get alerted about vulnerabilities that affect your stack.
Sign up free to get alerts when software you use is affected.
CVE Vulnerabilities - 30 September 2026
RSS3 vulnerabilities published on 30 September 2026
Zammad can let attackers hijack sessions and run code
CVE-2026-102489
The Zammad help‑desk system lets a user’s session be taken over by an attacker, who can then run commands on the server as the Zammad service account. This could let the attacker control the system re...
9.4
KEV
Cisco Catalyst SD-WAN Manager lets remote attacker gain admin access
CVE-2026-76504
The SD-WAN Manager software can be tricked by a specially crafted web request, allowing someone on the network to log in without a password and act as an administrator. This could let an attacker chan...
9.8
KEV
Zammad lets local user gain admin rights
CVE-2026-102490
GHSA-p97w-927q-8vxq
The Zammad ticket system on your server can let a regular user on the machine upgrade their access to full administrator (root) level. This could let an attacker take control of the entire system. App...
8.4
KEV