{"total":14,"items":[{"id":581,"title":"Kwetsbaarheid verholpen in Fortinet FortiMail","original_title":"Kwetsbaarheid verholpen in Fortinet FortiMail","source_rating":null,"summary":"Fortinet heeft een kwetsbaarheid verholpen in FortiMail. FortiMail bevat een kritieke kwetsbaarheid (CVE-2026-104286) in de verwerking van bestandspaden, veroorzaakt door een combinatie van Path Traversal (CWE-22) en onvoldoende neutralisatie van NULL-bytes (CWE-158). Een niet-geauthenticeerde aanvaller kan via speciaa","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0398","type":"advisory","language":"nl","published_at":"2026-10-02T07:21:47+00:00","severity":"kritiek","priority":70,"vendors":["Fortinet"],"cves":[{"id":"CVE-2026-104286","cvss":9.8,"epss":null,"epss_percentile":null,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":null,"source_count":2,"ncsc":{"kans":"M","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":659,"title":"CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability","original_title":"CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability","source_rating":null,"summary":"Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Pri","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102490","type":"kev","language":"en","published_at":"2026-10-02T00:00:00+00:00","severity":"hoog","priority":65,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102490","cvss":9.4,"epss":0.00262,"epss_percentile":0.16336,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.00262,"source_count":4,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":660,"title":"CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability","original_title":"CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability","source_rating":null,"summary":"Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updat","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102489","type":"kev","language":"en","published_at":"2026-10-02T00:00:00+00:00","severity":"hoog","priority":65,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102489","cvss":9.4,"epss":0.00582,"epss_percentile":0.45835,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.00582,"source_count":4,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":580,"title":"CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability","original_title":"CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability","source_rating":null,"summary":"Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.\n\nVereiste actie: Apply mitigations in accordance with vendor instructi","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104286","type":"kev","language":"en","published_at":"2026-10-01T00:00:00+00:00","severity":"hoog","priority":55,"vendors":["Fortinet"],"cves":[{"id":"CVE-2026-104286","cvss":9.8,"epss":null,"epss_percentile":null,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":null,"source_count":2,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":27,"title":"Actief misbruik van zeroday-kwetsbaarheden in Zammad: update nu","original_title":"Actief misbruik van zeroday-kwetsbaarheden in Zammad: update nu","source_rating":null,"summary":"Er zijn twee zeroday-kwetsbaarheden ontdekt in Zammad, een softwareproduct voor klantenservice. De kwetsbaarheden hebben de kenmerken CVE-2026-102489 en CVE-2026-102490. Beide kwetsbaarheden worden actief misbruikt en de kans op misbruik en de mogelijke schade zijn hoog.","ai":false,"actions":[],"url":"https://www.ncsc.nl/alerts/actief-misbruik-van-zeroday-kwetsbaarheden-in-zammad-update-nu","type":"news","language":"nl","published_at":"2026-09-30T18:44:28+00:00","severity":"kritiek","priority":70,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102489","cvss":9.4,"epss":0.00582,"epss_percentile":0.45835,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-102490","cvss":9.4,"epss":0.00262,"epss_percentile":0.16336,"in_kev":true,"kev_ransomware":false}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.00582,"source_count":4,"ncsc":null,"source":{"slug":"ncsc-nl-nieuws","name":"NCSC-NL Nieuws & alerts","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":414,"title":"Kwetsbaarheden aangetroffen in Zammad","original_title":"Kwetsbaarheden aangetroffen in Zammad","source_rating":null,"summary":"Er zijn twee zeroday-kwetsbaarheden aangetroffen in Zammad. De eerste kwetsbaarheid heeft het kenmerk CVE-2026-102489 toegekend gekregen. De kwetsbaarheid stelt een ongeauthenticeerde kwaadwillende op afstand in staat om willekeurige code uit te voeren. De kwetsbaarheid is aanwezig in Zammad versies 6.3.0 tot en met 6.","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0396","type":"advisory","language":"nl","published_at":"2026-09-30T17:31:14+00:00","severity":"kritiek","priority":95,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102489","cvss":9.4,"epss":0.00582,"epss_percentile":0.45835,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-102490","cvss":9.4,"epss":0.00262,"epss_percentile":0.16336,"in_kev":true,"kev_ransomware":false}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.00582,"source_count":4,"ncsc":{"kans":"H","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":237,"title":"Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability","original_title":"Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability","source_rating":null,"summary":"A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of…","ai":false,"actions":[],"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Manager%20API%20Authentication%20Bypass%20Vulnerability%26vs_k=1","type":"advisory","language":"en","published_at":"2026-09-30T13:00:00+00:00","severity":"hoog","priority":55,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-76504","cvss":9.8,"epss":0.01575,"epss_percentile":0.74572,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":0.01575,"source_count":2,"ncsc":null,"source":{"slug":"cisco-psirt","name":"Cisco PSIRT","category":"vendor","country":null,"license":"© Cisco","reuse":"excerpt"},"bundle":null},{"id":416,"title":"Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway","original_title":"Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway","source_rating":null,"summary":"Citrix heeft 8 kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De volgende ondersteunde versies van Citrix NetScaler ADC en Citrix NetScaler Gateway zijn kwetsbaar:\n\n- Citrix NetScaler ADC en Citrix NetScaler Gateway 14.1 vóór versie 14.1-73.37\n- Citrix NetScaler ADC en Citrix NetScaler Gateway 13.1 vóó","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0394","type":"advisory","language":"nl","published_at":"2026-09-30T08:38:43+00:00","severity":"kritiek","priority":95,"vendors":["Citrix"],"cves":[{"id":"CVE-2026-88772","cvss":9.5,"epss":0.01301,"epss_percentile":0.69447,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-88771","cvss":9.5,"epss":0.01063,"epss_percentile":0.63433,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-88775","cvss":8.8,"epss":0.00384,"epss_percentile":0.3008,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-88776","cvss":8.8,"epss":0.00384,"epss_percentile":0.3008,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-88777","cvss":8.8,"epss":0.00384,"epss_percentile":0.30079,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-88778","cvss":8.8,"epss":0.00379,"epss_percentile":0.29505,"in_kev":false,"kev_ransomware":false}],"cve_count":8,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.5,"epss_max":0.01301,"source_count":3,"ncsc":{"kans":"H","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":516,"title":"CVE-2026-102490: Zammad, actief misbruikt","original_title":"CVE-2026-102490: Zammad, actief misbruikt","source_rating":null,"summary":"All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.","ai":false,"actions":[],"url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90081","type":"advisory","language":"en","published_at":"2026-09-30T00:00:00+00:00","severity":"hoog","priority":65,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102490","cvss":9.4,"epss":0.00262,"epss_percentile":0.16336,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.00262,"source_count":4,"ncsc":null,"source":{"slug":"euvd","name":"ENISA EU Vulnerability Database","category":"vulnerability","country":"EU","license":"ENISA, hergebruik met bronvermelding","reuse":"open"},"bundle":null},{"id":134,"title":"CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability","original_title":"CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability","source_rating":null,"summary":"Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76504","type":"kev","language":"en","published_at":"2026-09-30T00:00:00+00:00","severity":"hoog","priority":55,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-76504","cvss":9.8,"epss":0.01575,"epss_percentile":0.74572,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":0.01575,"source_count":2,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":517,"title":"CVE-2026-102489: Zammad, actief misbruikt","original_title":"CVE-2026-102489: Zammad, actief misbruikt","source_rating":null,"summary":"Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3, but not exploitable due to environment conditions.","ai":false,"actions":[],"url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90080","type":"advisory","language":"en","published_at":"2026-09-30T00:00:00+00:00","severity":"hoog","priority":65,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102489","cvss":9.4,"epss":0.00582,"epss_percentile":0.45835,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.00582,"source_count":4,"ncsc":null,"source":{"slug":"euvd","name":"ENISA EU Vulnerability Database","category":"vulnerability","country":"EU","license":"ENISA, hergebruik met bronvermelding","reuse":"open"},"bundle":null},{"id":135,"title":"CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability","original_title":"CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability","source_rating":null,"summary":"Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidanc","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86950","type":"kev","language":"en","published_at":"2026-09-29T00:00:00+00:00","severity":"hoog","priority":48,"vendors":["Apple"],"cves":[{"id":"CVE-2026-86950","cvss":8.8,"epss":0.01242,"epss_percentile":0.6813,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":8.8,"epss_max":0.01242,"source_count":1,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":137,"title":"CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability","original_title":"CVE-2026-88771: Citrix NetScaler Improper Input Validation Vulnerability","source_rating":null,"summary":"Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Bas","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88771","type":"kev","language":"en","published_at":"2026-09-27T00:00:00+00:00","severity":"hoog","priority":65,"vendors":["Citrix"],"cves":[{"id":"CVE-2026-88771","cvss":9.5,"epss":0.01063,"epss_percentile":0.63433,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.5,"epss_max":0.01063,"source_count":3,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":136,"title":"CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","original_title":"CVE-2026-88772: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","source_rating":null,"summary":"Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88772","type":"kev","language":"en","published_at":"2026-09-27T00:00:00+00:00","severity":"hoog","priority":65,"vendors":["Citrix"],"cves":[{"id":"CVE-2026-88772","cvss":9.5,"epss":0.01301,"epss_percentile":0.69447,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.5,"epss_max":0.01301,"source_count":3,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null}]}