{"total":134,"items":[{"id":613,"title":"[NIEUW] [hoog] OpenCTI: Kwetsbaarheid maakt verkrijgen van beheerrechten mogelijk","original_title":"[NEU] [hoch] OpenCTI: Schwachstelle ermöglicht Erlangen von Administratorrechten","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3717","type":"advisory","language":"de","published_at":"2026-10-02T11:26:29+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":612,"title":"[NIEUW] [hoog] CPython: Meerdere kwetsbaarheden","original_title":"[NEU] [hoch] CPython: Mehrere Schwachstellen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3716","type":"advisory","language":"de","published_at":"2026-10-02T11:11:29+00:00","severity":"middel","priority":25,"vendors":["Python"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":611,"title":"[UPDATE] [hoog] Ghostscript: Kwetsbaarheid maakt code-uitvoering en manipulatie van gegevens mogelijk","original_title":"[UPDATE] [hoch] Ghostscript: Schwachstelle ermöglicht Codeausführung und Manipulation von Daten","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3408","type":"advisory","language":"de","published_at":"2026-10-02T11:11:29+00:00","severity":"middel","priority":25,"vendors":["Ghostscript"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":{"mode":"updates","count":3,"day":"2026-10-02","source":"bsi-wid","in_kev":0,"worst":"middel"}},{"id":584,"title":"[NIEUW] [ONGEPATCHT] [kritiek] Foreman: Meerdere kwetsbaarheden","original_title":"[NEU] [UNGEPATCHT] [kritisch] Foreman: Mehrere Schwachstellen","source_rating":"kritiek","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3712","type":"advisory","language":"de","published_at":"2026-10-02T10:26:30+00:00","severity":"hoog","priority":45,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":585,"title":"[NIEUW] [hoog] LiteLLM: Kwetsbaarheid maakt openbaarmaking van informatie en mogelijk privilege-escalatie mogelijk","original_title":"[NEU] [hoch] LiteLLM: Schwachstelle ermöglicht Offenlegung von Informationen und potenziell Privilegieneskalation","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3711","type":"advisory","language":"de","published_at":"2026-10-02T10:26:30+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":586,"title":"[NIEUW] [hoog] CODESYS Control Runtime en Gateway Client: Meerdere kwetsbaarheden","original_title":"[NEU] [hoch] CODESYS Control Runtime und Gateway Client: Mehrere Schwachstellen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3710","type":"advisory","language":"de","published_at":"2026-10-02T10:26:30+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":588,"title":"[NIEUW] [hoog] Tenable Security Nessus: Meerdere kwetsbaarheden","original_title":"[NEU] [hoch] Tenable Security Nessus: Mehrere Schwachstellen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3708","type":"advisory","language":"de","published_at":"2026-10-02T10:26:30+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":592,"title":"[NIEUW] [hoog] Wind River VxWorks: Kwetsbaarheid maakt privilege-escalatie mogelijk","original_title":"[NEU] [hoch] Wind River VxWorks: Schwachstelle ermöglicht Privilegieneskalation","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3704","type":"advisory","language":"de","published_at":"2026-10-02T10:26:29+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":591,"title":"[NIEUW] [hoog] MISP: Meerdere kwetsbaarheden","original_title":"[NEU] [hoch] MISP: Mehrere Schwachstellen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3705","type":"advisory","language":"de","published_at":"2026-10-02T10:26:29+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":593,"title":"[NIEUW] [hoog] Apache HTTP Server: Meerdere kwetsbaarheden","original_title":"[NEU] [hoch] Apache HTTP Server: Mehrere Schwachstellen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3703","type":"advisory","language":"de","published_at":"2026-10-02T10:26:29+00:00","severity":"middel","priority":25,"vendors":["Apache"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":590,"title":"[NIEUW] [hoog] BigBlueButton: Meerdere kwetsbaarheden","original_title":"[NEU] [hoch] BigBlueButton: Mehrere Schwachstellen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3706","type":"advisory","language":"de","published_at":"2026-10-02T10:26:29+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":582,"title":"[NIEUW] [kritiek] Fortinet FortiMail: Kwetsbaarheid maakt manipulatie van bestanden mogelijk","original_title":"[NEU] [kritisch] Fortinet FortiMail: Schwachstelle ermöglicht Manipulation von Dateien","source_rating":"kritiek","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3701","type":"advisory","language":"de","published_at":"2026-10-02T09:11:29+00:00","severity":"hoog","priority":45,"vendors":["Fortinet"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":581,"title":"Kwetsbaarheid verholpen in Fortinet FortiMail","original_title":"Kwetsbaarheid verholpen in Fortinet FortiMail","source_rating":null,"summary":"Fortinet heeft een kwetsbaarheid verholpen in FortiMail. FortiMail bevat een kritieke kwetsbaarheid (CVE-2026-104286) in de verwerking van bestandspaden, veroorzaakt door een combinatie van Path Traversal (CWE-22) en onvoldoende neutralisatie van NULL-bytes (CWE-158). Een niet-geauthenticeerde aanvaller kan via speciaa","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0398","type":"advisory","language":"nl","published_at":"2026-10-02T07:21:47+00:00","severity":"kritiek","priority":70,"vendors":["Fortinet"],"cves":[{"id":"CVE-2026-104286","cvss":9.8,"epss":null,"epss_percentile":null,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":null,"source_count":2,"ncsc":{"kans":"M","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":659,"title":"CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability","original_title":"CVE-2026-102490: Zammad GmbH Zammad Improper Privilege Management Vulnerability","source_rating":null,"summary":"Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Pri","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102490","type":"kev","language":"en","published_at":"2026-10-02T00:00:00+00:00","severity":"hoog","priority":65,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102490","cvss":9.4,"epss":0.00262,"epss_percentile":0.16336,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.00262,"source_count":4,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":660,"title":"CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability","original_title":"CVE-2026-102489: Zammad GmbH Zammad Session Fixation Vulnerability","source_rating":null,"summary":"Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updat","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102489","type":"kev","language":"en","published_at":"2026-10-02T00:00:00+00:00","severity":"hoog","priority":65,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102489","cvss":9.4,"epss":0.00582,"epss_percentile":0.45835,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.00582,"source_count":4,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":657,"title":"Warning: Critical Cisco Catalyst SD-WAN Manager authentication bypass grants admin API access. Actively exploited, Patch Immediately!","original_title":"Warning: Critical Cisco Catalyst SD-WAN Manager authentication bypass grants admin API access. Actively exploited, Patch Immediately!","source_rating":null,"summary":"","ai":false,"actions":[],"url":"https://ccb.belgium.be/advisories/warning-critical-cisco-catalyst-sd-wan-manager-authentication-bypass-grants-admin-api","type":"advisory","language":"en","published_at":"2026-10-01T13:42:09+00:00","severity":"hoog","priority":50,"vendors":["Cisco"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"ccb-be","name":"CCB / Safeonweb@work (België)","category":"overheid","country":"BE","license":"© CCB, hergebruik voorbehouden","reuse":"link"},"bundle":null},{"id":483,"title":"[UPDATE] [kritiek] Zammad: Meerdere kwetsbaarheden maken Ausführen von beliebigem Programmcode en privilege-escalatie mogelijk","original_title":"[UPDATE] [kritisch] Zammad: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode und Privilegieneskalation","source_rating":"kritiek","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3694","type":"advisory","language":"de","published_at":"2026-10-01T11:26:29+00:00","severity":"hoog","priority":45,"vendors":["Zammad"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":{"mode":"updates","count":45,"day":"2026-10-01","source":"bsi-wid","in_kev":0,"worst":"hoog"}},{"id":504,"title":"[NIEUW] [hoog] Kiteworks: Meerdere kwetsbaarheden","original_title":"[NEU] [hoch] Kiteworks: Mehrere Schwachstellen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3695","type":"advisory","language":"de","published_at":"2026-10-01T11:31:29+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":484,"title":"[NIEUW] [hoog] MediaWiki Extensions: Meerdere kwetsbaarheden","original_title":"[NEU] [hoch] MediaWiki Extensions: Mehrere Schwachstellen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3693","type":"advisory","language":"de","published_at":"2026-10-01T11:26:29+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":478,"title":"[NIEUW] [hoog] JetBrains TeamCity: Meerdere kwetsbaarheden","original_title":"[NEU] [hoch] JetBrains TeamCity: Mehrere Schwachstellen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3687","type":"advisory","language":"de","published_at":"2026-10-01T11:11:29+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":476,"title":"[NIEUW] [hoog] MISP: Meerdere kwetsbaarheden","original_title":"[NEU] [hoch] MISP: Mehrere Schwachstellen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3689","type":"advisory","language":"de","published_at":"2026-10-01T11:11:29+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":480,"title":"[NIEUW] [hoog] OpenCTI: Kwetsbaarheid maakt openbaarmaking van informatie en manipulatie van gegevens mogelijk","original_title":"[NEU] [hoch] OpenCTI: Schwachstelle ermöglicht Offenlegung von Informationen und Manipulation von Daten","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3685","type":"advisory","language":"de","published_at":"2026-10-01T11:06:29+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null},{"id":413,"title":"Kwetsbaarheid verholpen in Apple CoreGraphics","original_title":"Kwetsbaarheid verholpen in Apple CoreGraphics","source_rating":null,"summary":"Apple heeft een kwetsbaarheid verholpen in CoreGraphics op iOS, iPadOS en macOS. De kwetsbaarheid betreft een out-of-bounds write in de CoreGraphics component. Een aanvaller kan deze kwetsbaarheid misbruiken door speciaal vervaardigde bestanden te verwerken, wat kan leiden tot het uitvoeren van willekeurige code. Deze ","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0397","type":"advisory","language":"nl","published_at":"2026-10-01T10:35:52+00:00","severity":"middel","priority":25,"vendors":["Apple"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":{"kans":"M","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":580,"title":"CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability","original_title":"CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability","source_rating":null,"summary":"Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.\n\nVereiste actie: Apply mitigations in accordance with vendor instructi","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104286","type":"kev","language":"en","published_at":"2026-10-01T00:00:00+00:00","severity":"hoog","priority":55,"vendors":["Fortinet"],"cves":[{"id":"CVE-2026-104286","cvss":9.8,"epss":null,"epss_percentile":null,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":null,"source_count":2,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":359,"title":"Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)","original_title":"Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)","source_rating":null,"summary":"Unit 42 is aware of possible 0-day activity against NetScaler devices. Citrix reports CVE-2026-88771, CVE-2026-88772 have been exploited in the wild. The post Threat Brief: NetScaler Zero Days…","ai":false,"actions":[],"url":"https://unit42.paloaltonetworks.com/netscaler-zero-days-exploited/","type":"research","language":"en","published_at":"2026-09-30T20:00:04+00:00","severity":"middel","priority":37,"vendors":["Citrix"],"cves":[{"id":"CVE-2026-88772","cvss":9.5,"epss":0.01301,"epss_percentile":0.69447,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-88771","cvss":9.5,"epss":0.01063,"epss_percentile":0.63433,"in_kev":true,"kev_ransomware":false}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.5,"epss_max":0.01301,"source_count":3,"ncsc":null,"source":{"slug":"unit42","name":"Palo Alto Unit 42","category":"onderzoek","country":null,"license":"© Palo Alto Networks","reuse":"excerpt"},"bundle":null},{"id":27,"title":"Actief misbruik van zeroday-kwetsbaarheden in Zammad: update nu","original_title":"Actief misbruik van zeroday-kwetsbaarheden in Zammad: update nu","source_rating":null,"summary":"Er zijn twee zeroday-kwetsbaarheden ontdekt in Zammad, een softwareproduct voor klantenservice. De kwetsbaarheden hebben de kenmerken CVE-2026-102489 en CVE-2026-102490. Beide kwetsbaarheden worden actief misbruikt en de kans op misbruik en de mogelijke schade zijn hoog.","ai":false,"actions":[],"url":"https://www.ncsc.nl/alerts/actief-misbruik-van-zeroday-kwetsbaarheden-in-zammad-update-nu","type":"news","language":"nl","published_at":"2026-09-30T18:44:28+00:00","severity":"kritiek","priority":70,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102489","cvss":9.4,"epss":0.00582,"epss_percentile":0.45835,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-102490","cvss":9.4,"epss":0.00262,"epss_percentile":0.16336,"in_kev":true,"kev_ransomware":false}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.00582,"source_count":4,"ncsc":null,"source":{"slug":"ncsc-nl-nieuws","name":"NCSC-NL Nieuws & alerts","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":414,"title":"Kwetsbaarheden aangetroffen in Zammad","original_title":"Kwetsbaarheden aangetroffen in Zammad","source_rating":null,"summary":"Er zijn twee zeroday-kwetsbaarheden aangetroffen in Zammad. De eerste kwetsbaarheid heeft het kenmerk CVE-2026-102489 toegekend gekregen. De kwetsbaarheid stelt een ongeauthenticeerde kwaadwillende op afstand in staat om willekeurige code uit te voeren. De kwetsbaarheid is aanwezig in Zammad versies 6.3.0 tot en met 6.","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0396","type":"advisory","language":"nl","published_at":"2026-09-30T17:31:14+00:00","severity":"kritiek","priority":95,"vendors":["Zammad"],"cves":[{"id":"CVE-2026-102489","cvss":9.4,"epss":0.00582,"epss_percentile":0.45835,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-102490","cvss":9.4,"epss":0.00262,"epss_percentile":0.16336,"in_kev":true,"kev_ransomware":false}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.4,"epss_max":0.00582,"source_count":4,"ncsc":{"kans":"H","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":415,"title":"Kwetsbaarheid verholpen in Cisco Catalyst SD-WAN Manager","original_title":"Kwetsbaarheid verholpen in Cisco Catalyst SD-WAN Manager","source_rating":null,"summary":"Cisco heeft een kwetsbaarheid verholpen in Cisco Catalyst SD-WAN Manager. De kwetsbaarheid bevindt zich in een API van Cisco Catalyst SD-WAN Manager. Door onjuiste verwerking van URI-encoding kunnen ongeauthenticeerde kwaadwillenden authenticatiemechanismen omzeilen. Hierdoor kan de kwaadwillende administratieve toegan","ai":false,"actions":[],"url":"https://advisories.ncsc.nl/advisory?id=NCSC-2026-0395","type":"advisory","language":"nl","published_at":"2026-09-30T14:43:36+00:00","severity":"middel","priority":25,"vendors":["Cisco"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":{"kans":"M","schade":"H"},"source":{"slug":"ncsc-nl-advisories","name":"NCSC-NL Security Advisories","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":237,"title":"Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability","original_title":"Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability","source_rating":null,"summary":"A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of…","ai":false,"actions":[],"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Manager%20API%20Authentication%20Bypass%20Vulnerability%26vs_k=1","type":"advisory","language":"en","published_at":"2026-09-30T13:00:00+00:00","severity":"hoog","priority":55,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-76504","cvss":9.8,"epss":0.01575,"epss_percentile":0.74572,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":0.01575,"source_count":2,"ncsc":null,"source":{"slug":"cisco-psirt","name":"Cisco PSIRT","category":"vendor","country":null,"license":"© Cisco","reuse":"excerpt"},"bundle":null},{"id":97,"title":"[NIEUW] [hoog] n8n: Meerdere kwetsbaarheden","original_title":"[NEU] [hoch] n8n: Mehrere Schwachstellen","source_rating":"hoog","summary":"","ai":false,"actions":[],"url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3672","type":"advisory","language":"de","published_at":"2026-09-30T11:51:29+00:00","severity":"middel","priority":25,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"bsi-wid","name":"BSI CERT-Bund WID","category":"overheid","country":"DE","license":"© BSI","reuse":"excerpt"},"bundle":null}]}