{
  "results": [
    {
      "id": "CVE-2026-102490",
      "vendor": "Zammad GmbH",
      "product": "Zammad",
      "name": "Zammad GmbH Zammad Improper Privilege Management Vulnerability",
      "dateAdded": "2026-10-02",
      "dueDate": "2026-10-05",
      "ransomware": false,
      "epss": {
        "score": 0.00629,
        "percentile": 0.48335,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-102490",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-102490",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102490"
      }
    },
    {
      "id": "CVE-2026-102489",
      "vendor": "Zammad GmbH",
      "product": "Zammad",
      "name": "Zammad GmbH Zammad Session Fixation Vulnerability",
      "dateAdded": "2026-10-02",
      "dueDate": "2026-10-05",
      "ransomware": false,
      "epss": {
        "score": 0.01396,
        "percentile": 0.71464,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-102489",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-102489",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-102489"
      }
    },
    {
      "id": "CVE-2026-104286",
      "vendor": "Fortinet",
      "product": "FortiMail",
      "name": "Fortinet FortiMail Path Traversal Vulnerability",
      "dateAdded": "2026-10-01",
      "dueDate": "2026-10-04",
      "ransomware": false,
      "epss": {
        "score": 0.02201,
        "percentile": 0.81912,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-104286",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-104286",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-104286"
      }
    },
    {
      "id": "CVE-2026-76504",
      "vendor": "Cisco",
      "product": "Catalyst SD-WAN Manager",
      "name": "Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability",
      "dateAdded": "2026-09-30",
      "dueDate": "2026-10-03",
      "ransomware": false,
      "epss": {
        "score": 0.01575,
        "percentile": 0.74593,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-76504",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-76504",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76504"
      }
    },
    {
      "id": "CVE-2026-86950",
      "vendor": "Apple",
      "product": "Multiple Products",
      "name": "Apple Multiple Products Out-of-Bounds Write Vulnerability",
      "dateAdded": "2026-09-29",
      "dueDate": "2026-10-02",
      "ransomware": false,
      "epss": {
        "score": 0.01242,
        "percentile": 0.68155,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-86950",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-86950",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-86950"
      }
    },
    {
      "id": "CVE-2026-88772",
      "vendor": "Citrix",
      "product": "NetScaler",
      "name": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
      "dateAdded": "2026-09-27",
      "dueDate": "2026-09-30",
      "ransomware": false,
      "epss": {
        "score": 0.01301,
        "percentile": 0.6947,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-88772",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-88772",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88772"
      }
    },
    {
      "id": "CVE-2026-88771",
      "vendor": "Citrix",
      "product": "NetScaler",
      "name": "Citrix NetScaler Improper Input Validation Vulnerability",
      "dateAdded": "2026-09-27",
      "dueDate": "2026-09-30",
      "ransomware": false,
      "epss": {
        "score": 0.01063,
        "percentile": 0.63459,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-88771",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-88771",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-88771"
      }
    },
    {
      "id": "CVE-2026-87902",
      "vendor": "WordPress",
      "product": "Core",
      "name": "WordPress Core Remote File Inclusion Vulnerability",
      "dateAdded": "2026-09-25",
      "dueDate": "2026-09-28",
      "ransomware": false,
      "epss": {
        "score": 0.45501,
        "percentile": 0.98757,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-87902",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-87902",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-87902"
      }
    },
    {
      "id": "CVE-2026-67279",
      "vendor": "MikroTik",
      "product": "RouterOS",
      "name": "Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability",
      "dateAdded": "2026-09-25",
      "dueDate": "2026-09-28",
      "ransomware": false,
      "epss": {
        "score": 0.01027,
        "percentile": 0.62388,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-67279",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-67279",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-67279"
      }
    },
    {
      "id": "CVE-2026-65660",
      "vendor": "Microsoft",
      "product": "SharePoint",
      "name": "Microsoft SharePoint Code Injection Vulnerability",
      "dateAdded": "2026-09-25",
      "dueDate": "2026-09-28",
      "ransomware": false,
      "epss": {
        "score": 0.02101,
        "percentile": 0.81063,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-65660",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-65660",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-65660"
      }
    },
    {
      "id": "CVE-2026-71362",
      "vendor": "Adobe",
      "product": "Commerce and Magento ",
      "name": "Adobe Commerce and Magento Incorrect Authorization Vulnerability ",
      "dateAdded": "2026-09-24",
      "dueDate": "2026-09-27",
      "ransomware": false,
      "epss": {
        "score": 0.87507,
        "percentile": 0.99755,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-71362",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-71362",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-71362"
      }
    },
    {
      "id": "CVE-2026-5430",
      "vendor": "WSO2",
      "product": "Multiple Products",
      "name": "WSO2 Multiple Products Path Traversal Vulnerability ",
      "dateAdded": "2026-09-24",
      "dueDate": "2026-09-27",
      "ransomware": false,
      "epss": {
        "score": 0.00588,
        "percentile": 0.46253,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-5430",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-5430",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-5430"
      }
    },
    {
      "id": "CVE-2026-94127",
      "vendor": "F5",
      "product": "BIG-IP APM",
      "name": "F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability",
      "dateAdded": "2026-09-22",
      "dueDate": "2026-09-25",
      "ransomware": false,
      "epss": {
        "score": 0.02226,
        "percentile": 0.82124,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-94127",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-94127",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-94127"
      }
    },
    {
      "id": "CVE-2026-93952",
      "vendor": "Arista",
      "product": "VeloCloud Orchestrator",
      "name": "Arista VeloCloud Orchestrator Improper Input Validation Vulnerability",
      "dateAdded": "2026-09-22",
      "dueDate": "2026-09-25",
      "ransomware": false,
      "epss": {
        "score": 0.01062,
        "percentile": 0.63408,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-93952",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-93952",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93952"
      }
    },
    {
      "id": "CVE-2026-93616",
      "vendor": "Check Point",
      "product": "Multiple Products",
      "name": "Check Point Multiple Products Path Traversal Vulnerability",
      "dateAdded": "2026-09-22",
      "dueDate": "2026-09-25",
      "ransomware": false,
      "epss": {
        "score": 0.19654,
        "percentile": 0.97323,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-93616",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-93616",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616"
      }
    },
    {
      "id": "CVE-2026-85102",
      "vendor": "Check Point",
      "product": "Multiple Products",
      "name": "Check Point Multiple Products Improper Certificate Validation Vulnerability",
      "dateAdded": "2026-09-22",
      "dueDate": "2026-09-25",
      "ransomware": false,
      "epss": {
        "score": 0.07546,
        "percentile": 0.94339,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-85102",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-85102",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85102"
      }
    },
    {
      "id": "CVE-2026-7273",
      "vendor": "Zyxel",
      "product": "GS1900 Series Switches",
      "name": "Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability",
      "dateAdded": "2026-09-21",
      "dueDate": "2026-09-24",
      "ransomware": false,
      "epss": {
        "score": 0.02501,
        "percentile": 0.84168,
        "date": "2026-10-03"
      },
      "requiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Foll…",
      "links": {
        "cve": "https://www.cve.org/CVERecord?id=CVE-2026-7273",
        "nvd": "https://nvd.nist.gov/vuln/detail/CVE-2026-7273",
        "kev": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-7273"
      }
    }
  ],
  "count": 17,
  "total": 17,
  "days": 14,
  "filters": {
    "vendor": null,
    "ransomware": false
  },
  "summary": {
    "added": 17,
    "ransomware": 0,
    "dueWithin14Days": 3
  },
  "sources": {
    "kevCatalog": "2026.10.02",
    "kevReleased": "2026-10-02",
    "kevTotal": 1733
  },
  "checkedAt": "2026-10-04T02:36:15.726Z",
  "limits": {
    "requestsPerMinutePerIp": 10,
    "cvesPerCall": 20,
    "timeoutSeconds": 20
  }
}