Zammad session fixation flaw CVE-2026-102489 exploited, CISA KEV
CISA says the Zammad flaw CVE-2026-102489 is exploited and can give code execution. Check your version, apply vendor fixes and review sessions by 5 October.
-
-
ShareFile Vulnerability Allows Server Takeover
A dangerous and critical ShareFile vulnerability chain has been discovered, posing a severe risk to organizations using customer-managed ShareFile Storage Zones Controller 5.x deployments. This potent attack allows threat actors to seize control of exposed on-premises servers without requiring any prior authentication, presenting an urgent security challenge. Progress, the vendor behind ShareFile, has strongly advised…
-
React2Shell Attack Drives Credential Theft on Next.js Servers
Critical React2Shell Flaw Exploited Globally Cybersecurity researchers at Cisco Talos have issued an urgent warning about a massive automated credential theft campaign actively targeting web applications worldwide. A sophisticated hacker group, tracked as UAT-10608, has already compromised over 700 servers by exploiting a critical security vulnerability known as React2Shell. This severe remote code execution flaw,…
-
Cisco SSM On-Prem Vulnerability Needs Patching
Urgent Cisco Security Alert: Critical SSM On-Prem Flaw Exposed Cisco has issued an urgent security warning regarding a critical vulnerability within its Smart Software Manager On-Prem (SSM On-Prem) platform. This widely-used tool, essential for managing Cisco software licenses locally in enterprise organizations, faces a severe threat. Tracked as CVE-2026-20160, this flaw carries a near-perfect CVSS…
-
CISA Mandates Immediate Patching for Critical Ivanti EPMM Vulnerability
CISA Issues Urgent Warning on Critical Ivanti EPMM Flaw The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical security flaw in Ivanti Endpoint Manager Mobile (EPMM). This significant vulnerability, tracked as CVE-2026-1340, has been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog after confirmation of its active exploitation in…
End of content
End of content