Week 40, 2026

Severity mix (107 articles)

• CRITICAL 11
• HIGH 29
• MEDIUM 11
• LOW 3
• INFO 53

Top stories

1. CRITICAL

   CVE-2026-102489: Zammad Session Fixation Leads to RCE – Patch Now

   Oct 2, 2026

2. CRITICAL

   CVE-2026-102490: Zammad Privilege Escalation Exploit in Wild

   Oct 2, 2026

3. CRITICAL

   Cisco FMC RCE via CVE-2026-20079: Patch Now

   Oct 2, 2026

4. CRITICAL

   Fortinet FortiMail Path Traversal (CVE-2026-104286) Under Active Attack

   Oct 1, 2026

5. CRITICAL

   Microsoft Patch Tuesday: Zero-Days & Critical RCEs Addressed

   Oct 1, 2026

6. CRITICAL

   CVE-2026-65660: Microsoft SharePoint Code Injection Exploit

   Oct 1, 2026

7. CRITICAL

   CVE-2026-67279: Unauthenticated Mikrotik RouterOS Exec Request Vulnerability

   Oct 1, 2026

8. CRITICAL

   CVE-2026-76504: Cisco Catalyst SD-WAN Manager Admin Access

   Oct 1, 2026

9. CRITICAL

   CVE-2026-86950: Apple Emergency Patches for iOS 26, macOS 26/15

   Oct 1, 2026

10. CRITICAL

    Critical Citrix NetScaler Zero-Days: CVE-2026-88772 & CVE-2026-88771

    Oct 1, 2026

+ 97 more in the archive.

CVEs tracked this week (36)

• CVE-2023-45208
• CVE-2025-1055
• CVE-2025-49704
• CVE-2025-49706
• CVE-2025-53770
• CVE-2025-53771
• CVE-2026-102489
• CVE-2026-102490
• CVE-2026-104286
• CVE-2026-12627
• CVE-2026-1581
• CVE-2026-20079
• CVE-2026-20316
• CVE-2026-35273
• CVE-2026-50343
• CVE-2026-54472
• CVE-2026-61421
• CVE-2026-63688
• CVE-2026-63692
• CVE-2026-65660
• CVE-2026-66804
• CVE-2026-67269
• CVE-2026-67273
• CVE-2026-67279
• CVE-2026-69730
• CVE-2026-69829
• CVE-2026-73570
• CVE-2026-76504
• CVE-2026-79898
• CVE-2026-79901
• CVE-2026-81963
• CVE-2026-85880
• CVE-2026-86950
• CVE-2026-88771
• CVE-2026-88772
• CVE-2026-90970