CISA's list that day
2 October 2026
On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Zammad GmbH Zammad. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2026-102489Session Fixation | Zammad GmbH Zammad | Patch nowForensic triage required by CISA; listed in the last 14 days | 0.01 | ||
| CVE-2026-102490Improper Privilege Management | Zammad GmbH Zammad | Patch nowForensic triage required by CISA; listed in the last 14 days | 0.01 |