CISA Adds Two Known Exploited Vulnerabilities to Catalog
- CISA: 118 events in the last 90 days
- Previous: 1 days earlier · Johnson Controls EasyIO Neo Series EC and CW Controllers
What happened
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise…
Summary assembled by rule from the sources below
Why it's spreading
Sources
Filing
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Advisories