https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 15:17:25 +0000 https://vulnerability.circl.lu/sighting/a66e1a0c-19b4-4863-b24e-f49df972a605/export {"uuid": "a66e1a0c-19b4-4863-b24e-f49df972a605", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102489", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8227a228-d30d-4abb-9c78-64ef4ab79579", "content": "", "creation_timestamp": "2026-10-01T08:00:02.318514Z"} {"uuid": "a66e1a0c-19b4-4863-b24e-f49df972a605", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102489", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8227a228-d30d-4abb-9c78-64ef4ab79579", "content": "", "creation_timestamp": "2026-10-01T08:00:02.318514Z"} https://vulnerability.circl.lu/sighting/a66e1a0c-19b4-4863-b24e-f49df972a605/export Thu, 01 Oct 2026 08:00:02 +0000 https://vulnerability.circl.lu/sighting/c198b9f6-8d2b-4fcc-ad3c-d792308684cc/export {"uuid": "c198b9f6-8d2b-4fcc-ad3c-d792308684cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102489", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwsch3i2bh2f", "content": "Zammad helpdesk zero-days CVE-2026-102489 and CVE-2026-102490 let an AI agent breach DIVD: session hijack to root in seconds. Upgrade to Zammad 7 or take older instances offline. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-01T07:09:52.250292Z"} {"uuid": "c198b9f6-8d2b-4fcc-ad3c-d792308684cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102489", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwsch3i2bh2f", "content": "Zammad helpdesk zero-days CVE-2026-102489 and CVE-2026-102490 let an AI agent breach DIVD: session hijack to root in seconds. Upgrade to Zammad 7 or take older instances offline. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-01T07:09:52.250292Z"} https://vulnerability.circl.lu/sighting/c198b9f6-8d2b-4fcc-ad3c-d792308684cc/export Thu, 01 Oct 2026 07:09:52 +0000 https://vulnerability.circl.lu/sighting/3dcbbb57-28b4-4c21-b6ef-2430c69fde5e/export {"uuid": "3dcbbb57-28b4-4c21-b6ef-2430c69fde5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102489", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwr75u6e7o2r", "content": "\ud83e\udd16 Two Zammad 0-days (CVE-2026-102489/102490) chained by an autonomous AI agent: session hijack, RCE and root escalation on DIVD's network in seconds. Fixed in Zammad 7.\nhttps://www.bleepingcomputer.com/news/security/divd-says-zammad-zero-days-enabled-ai-driven-network-breach/", "creation_timestamp": "2026-09-30T20:38:21.516907Z"} {"uuid": "3dcbbb57-28b4-4c21-b6ef-2430c69fde5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102489", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwr75u6e7o2r", "content": "\ud83e\udd16 Two Zammad 0-days (CVE-2026-102489/102490) chained by an autonomous AI agent: session hijack, RCE and root escalation on DIVD's network in seconds. Fixed in Zammad 7.\nhttps://www.bleepingcomputer.com/news/security/divd-says-zammad-zero-days-enabled-ai-driven-network-breach/", "creation_timestamp": "2026-09-30T20:38:21.516907Z"} https://vulnerability.circl.lu/sighting/3dcbbb57-28b4-4c21-b6ef-2430c69fde5e/export Wed, 30 Sep 2026 20:38:21 +0000 https://vulnerability.circl.lu/sighting/c2ec85bd-7d3e-4cec-84ba-e388f2a65b09/export {"uuid": "c2ec85bd-7d3e-4cec-84ba-e388f2a65b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102489", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwqwrqwys52o", "content": "\ud83d\udea8 CVE-2026-102489 \u2014 CVSS 9.4 CRITICAL\n\nZammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code exec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102489\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T18:08:25.335650Z"} {"uuid": "c2ec85bd-7d3e-4cec-84ba-e388f2a65b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102489", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwqwrqwys52o", "content": "\ud83d\udea8 CVE-2026-102489 \u2014 CVSS 9.4 CRITICAL\n\nZammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code exec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102489\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T18:08:25.335650Z"} https://vulnerability.circl.lu/sighting/c2ec85bd-7d3e-4cec-84ba-e388f2a65b09/export Wed, 30 Sep 2026 18:08:25 +0000 https://vulnerability.circl.lu/sighting/ebd8dc13-8159-43b3-8bae-91b841b926c3/export {"uuid": "ebd8dc13-8159-43b3-8bae-91b841b926c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102489", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0396", "content": "Er zijn twee zeroday-kwetsbaarheden aangetroffen in Zammad. De eerste kwetsbaarheid heeft het kenmerk CVE-2026-102489 toegekend gekregen. De kwetsbaarheid stelt een ongeauthenticeerde kwaadwillende op afstand in staat om willekeurige code uit te voeren. De kwetsbaarheid is aanwezig in Zammad versies 6.3.0 tot en met 6.5.4.\n\nDe tweede kwetsbaarheid heeft het kenmerk CVE-2026-102490 toegekend gekregen. Deze kwetsbaarheid stelt een kwaadwillende die over lage rechten beschikt in staat om rootrechten te verkrijgen op het kwetsbare systeem. Deze kwetsbaarheid is aanwezig in alle gangbare versies van Zammad.\n\nDe kwetsbaarheden worden in ieder geval sinds 21 september 2026 actief misbruikt voor het op afstand verkrijgen van rootrechten op het systeem waar Zammad op draait.", "creation_timestamp": "2026-09-30T15:31:14.000000Z"} {"uuid": "ebd8dc13-8159-43b3-8bae-91b841b926c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102489", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0396", "content": "Er zijn twee zeroday-kwetsbaarheden aangetroffen in Zammad. De eerste kwetsbaarheid heeft het kenmerk CVE-2026-102489 toegekend gekregen. De kwetsbaarheid stelt een ongeauthenticeerde kwaadwillende op afstand in staat om willekeurige code uit te voeren. De kwetsbaarheid is aanwezig in Zammad versies 6.3.0 tot en met 6.5.4.\n\nDe tweede kwetsbaarheid heeft het kenmerk CVE-2026-102490 toegekend gekregen. Deze kwetsbaarheid stelt een kwaadwillende die over lage rechten beschikt in staat om rootrechten te verkrijgen op het kwetsbare systeem. Deze kwetsbaarheid is aanwezig in alle gangbare versies van Zammad.\n\nDe kwetsbaarheden worden in ieder geval sinds 21 september 2026 actief misbruikt voor het op afstand verkrijgen van rootrechten op het systeem waar Zammad op draait.", "creation_timestamp": "2026-09-30T15:31:14.000000Z"} https://vulnerability.circl.lu/sighting/ebd8dc13-8159-43b3-8bae-91b841b926c3/export Wed, 30 Sep 2026 15:31:14 +0000 https://vulnerability.circl.lu/sighting/40e2a777-3c06-458c-a6da-949266e3ad2a/export {"uuid": "40e2a777-3c06-458c-a6da-949266e3ad2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-102489", "type": "seen", "source": "https://www.ncsc.nl/alerts/actief-misbruik-van-zeroday-kwetsbaarheden-in-zammad-update-nu", "content": "", "creation_timestamp": "2026-09-30T11:44:28.000000Z"} {"uuid": "40e2a777-3c06-458c-a6da-949266e3ad2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-102489", "type": "seen", "source": "https://www.ncsc.nl/alerts/actief-misbruik-van-zeroday-kwetsbaarheden-in-zammad-update-nu", "content": "", "creation_timestamp": "2026-09-30T11:44:28.000000Z"} https://vulnerability.circl.lu/sighting/40e2a777-3c06-458c-a6da-949266e3ad2a/export Wed, 30 Sep 2026 11:44:28 +0000