{"total":3,"items":[{"id":27,"title":"Actief misbruik van zeroday-kwetsbaarheden in Zammad: update nu","original_title":"Actief misbruik van zeroday-kwetsbaarheden in Zammad: update nu","source_rating":null,"summary":"Er zijn twee zeroday-kwetsbaarheden ontdekt in Zammad, een softwareproduct voor klantenservice. De kwetsbaarheden hebben de kenmerken CVE-2026-102489 en CVE-2026-102490. Beide kwetsbaarheden worden actief misbruikt en de kans op misbruik en de mogelijke schade zijn hoog.","ai":false,"actions":[],"url":"https://www.ncsc.nl/alerts/actief-misbruik-van-zeroday-kwetsbaarheden-in-zammad-update-nu","type":"news","language":"nl","published_at":"2026-09-30T18:44:28+00:00","severity":"kritiek","priority":70,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102489","cvss":9.4,"epss":0.01396,"epss_percentile":0.71464,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-102490","cvss":9.4,"epss":0.00629,"epss_percentile":0.48335,"in_kev":true,"kev_ransomware":false}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.01396,"source_count":4,"ncsc":null,"source":{"slug":"ncsc-nl-nieuws","name":"NCSC-NL Nieuws & alerts","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":414,"title":"Kwetsbaarheden aangetroffen in Zammad","original_title":"Kwetsbaarheden aangetroffen in Zammad","source_rating":null,"summary":"Er zijn twee zeroday-kwetsbaarheden aangetroffen in Zammad. De eerste kwetsbaarheid heeft het kenmerk CVE-2026-102489 toegekend gekregen. De kwetsbaarheid stelt een ongeauthenticeerde kwaadwillende op afstand in staat om willekeurige code uit te voeren. De kwetsbaarheid is aanwezig in Zammad versies 6.3.0 tot en met 6.","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0396","type":"advisory","language":"nl","published_at":"2026-09-30T17:31:14+00:00","severity":"kritiek","priority":95,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102489","cvss":9.4,"epss":0.01396,"epss_percentile":0.71464,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-102490","cvss":9.4,"epss":0.00629,"epss_percentile":0.48335,"in_kev":true,"kev_ransomware":false}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.01396,"source_count":4,"ncsc":{"kans":"H","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":623,"title":"Case update: DIVD-2026-00015 - Vulnerabilities in Zammad during investigation of case DIVD-2026-00014","original_title":"Case update: DIVD-2026-00015 - Vulnerabilities in Zammad during investigation of case DIVD-2026-00014","source_rating":null,"summary":"Last event: 26 Sep 2026 - DIVD started notifying owners of vulnerable instances.","ai":false,"actions":[],"url":"https://csirt.divd.nl/cases/DIVD-2026-00015/","type":"advisory","language":"en","published_at":"2026-09-26T00:00:00+00:00","severity":"laag","priority":5,"vendors":["Zammad"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"divd","name":"DIVD CSIRT","category":"onderzoek","country":"NL","license":"© DIVD","reuse":"excerpt"},"bundle":null}]}