Live Cybersecurity Brief for October 3, 2026: Active Threats, CVEs, and Vendor Advisories

CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability

CISA Known Exploited Vulnerabilities | October 2, 2026 5:30 am IST | Known Exploited | CVSS 9.8

Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.

Why it matters: Zammad GmbH Zammad belongs in an exploit-led queue only after the affected product is matched to a reachable asset and accountable owner.

What to verify: Confirm the affected version and reachable component, preserve useful telemetry, apply the publisher guidance, and record the evidence used to close the item.

Open the original source record

CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability

CISA Known Exploited Vulnerabilities | October 2, 2026 5:30 am IST | Known Exploited | CVSS 9.8

Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.

Why it matters: Zammad GmbH Zammad belongs in an exploit-led queue only after the affected product is matched to a reachable asset and accountable owner.

What to verify: Start with asset ownership and exposure, compare the fixed release with the deployed build, and validate both security behavior and service health afterward.

Open the original source record

CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability

CISA Cybersecurity Advisories | October 1, 2026 5:30 pm IST | Known Exploited

Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.

Why it matters: Fortinet FortiMail commonly protects an internet edge or management boundary. Exposure there can affect remote access, traffic inspection, credentials, and the trust placed in downstream systems.

What to verify: Check the running firmware and model, restrict management access, compare configuration changes and new accounts, preserve independent logs, and rotate credentials if compromise cannot be excluded.

Open the original source record

CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

CISA Cybersecurity Advisories | September 30, 2026 5:30 pm IST | Known Exploited

Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.

Why it matters: Cisco Catalyst SD-WAN Manager commonly protects an internet edge or management boundary. Exposure there can affect remote access, traffic inspection, credentials, and the trust placed in downstream systems.

What to verify: Check the running firmware and model, restrict management access, compare configuration changes and new accounts, preserve independent logs, and rotate credentials if compromise cannot be excluded.

Open the original source record

CVE-2023-54405: H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud…

NIST National Vulnerability Database | October 3, 2026 12:46 am IST | CRITICAL | CVSS 9.8

H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter without restricting path traversal or file type. Attackers can exploit the path traversal in the token parameter to upload a malicious JSP file into a web-accessible directory and then request it to achieve remote code execution as…

Why it matters: H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud… needs an account, region, identity path, exposure state, and provider-versus-tenant ownership decision.

What to verify: Start with asset ownership and exposure, compare the fixed release with the deployed build, and validate both security behavior and service health afterward.

Open the original source record

CVE-2026-19652: The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in…

NIST National Vulnerability Database | October 2, 2026 7:47 pm IST | CRITICAL | CVSS 9.8

The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the `dmem_form_submit_handler()` function determining the new user's role by iterating all WordPress roles and calling `password_verify()` against an attacker-controlled bcrypt hash supplied in the `form_id` POST parameter, with no validation or whitelist of allowed roles. This makes it possible for unauthenticated attackers to register a new account with the administrator role by submitting…

Why it matters: The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in… may sit directly on a public website, so a vulnerable core, plugin, or theme can turn a routine content system into an initial-access path.

What to verify: Record the exact WordPress core and extension versions, confirm whether the affected feature is enabled, review administrator accounts, and inspect web requests before and after the update.

Open the original source record

CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability

CISA Cybersecurity Advisories | September 29, 2026 5:30 pm IST | Known Exploited