{"schema":"hottub-news/story/v1","story":"st_dw7pqquexillxrrme5qq","title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","title_en":null,"outlets":1,"brief":null,"page":"https://hottub.news/stories/cisa-adds-one-known-exploited-vulnerability-to-catalog-dw7pqquexi","count":3,"items":[{"id":"n_63rmbphjww3ximgyappa","seq":1441194,"kind":"article","title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","url":"https://www.cisa.gov/news-events/alerts/2026/10/02/cisa-adds-two-known-exploited-vulnerabilities-catalog","summary":"CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing…","published":"2026-10-02T12:00:00Z","seen":"2026-10-02T22:37:04Z","lang":"en","source":{"id":"kite-cisa-gov-252287","name":"cisa.gov","domain":"cisa.gov"},"via":"kite-cisa-gov-252287","topics":["cybersecurity"],"authors":["CISA"],"entities":[{"id":"Q5205058","name":"Cybersecurity and Infrastructure Security Agency","type":"org"}],"story":"st_dw7pqquexillxrrme5qq","category":"science-technology","category_p":0.38999998569488525,"category2":"crime-law","sentiment":"neutral","tone":-0.3799999952316284,"political":0.07999999821186066},{"id":"n_rtftnh2izs7oohuvwmva","seq":1224340,"kind":"article","title":"CISA Adds One Known Exploited Vulnerability to Catalog","url":"https://www.cisa.gov/news-events/alerts/2026/10/01/cisa-adds-one-known-exploited-vulnerability-catalog","summary":"CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for…","published":"2026-10-01T12:00:00Z","seen":"2026-10-01T22:01:10Z","lang":"en","source":{"id":"kite-cisa-gov-252287","name":"cisa.gov","domain":"cisa.gov"},"via":"kite-cisa-gov-252287","topics":["cybersecurity"],"authors":["CISA"],"story":"st_dw7pqquexillxrrme5qq","category":"science-technology","category_p":0.4699999988079071,"sentiment":"negative","tone":-0.4399999976158142,"political":0.07000000029802322},{"id":"n_dw7pqquexillxrrme5qq","seq":1002630,"kind":"article","title":"CISA Adds One Known Exploited Vulnerability to Catalog","url":"https://www.cisa.gov/news-events/alerts/2026/09/30/cisa-adds-one-known-exploited-vulnerability-catalog","summary":"CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements…","published":"2026-09-30T12:00:00Z","seen":"2026-09-30T21:25:20Z","lang":"en","source":{"id":"kite-cisa-gov-252287","name":"cisa.gov","domain":"cisa.gov"},"via":"kite-cisa-gov-252287","topics":["cybersecurity"],"authors":["CISA"],"story":"st_dw7pqquexillxrrme5qq","category":"science-technology","category_p":0.4699999988079071,"sentiment":"negative","tone":-0.4399999976158142,"political":0.07000000029802322}]}