Weekly CVE report for Sept 28 - Oct 4, 2026: 2,652 new CVEs and seven exploited vulnerabilities in Cisco, FortiMail, MediaWiki and Citrix. Related Posts: Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026) Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV The post Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 – Oct. 4, 2026) appeared first on Daily CyberSecurity

Attackers exploited Zammad zero-day flaws CVE-2026-102489 and CVE-2026-102490 to gain root at DIVD. Upgrade to Zammad 7 or go offline. Related Posts: Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic Server Microsoft Reissues September 2026 Exchange Server Security Updates to Add CVE-2026-96940 AWS Fixes Loom for AWS Admin Takeover and SageMaker Unified Studio Code Execution Flaws The post Zammad Zero-Day Chain CVE-2026-102489 Exploited in the Wild