{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 28 September to 4 October 2026 (week 40)","summary":"In the week of 28 September to 4 October 2026, 6 vulnerabilities were newly recorded as exploited in the wild, 6 of them critical. The technology hit most was Zammad (2), followed by Zammad Gmbh Zammad (2) and Apple Ios (1).","url":"https://junglewise.ai/threats/exploited/2026-09-28","json_url":"https://junglewise.ai/threats/exploited/2026-09-28.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-09-28","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":6,"period":{"end":"2026-10-04","start":"2026-09-28"},"critical":6,"generated_at":"2026-10-06T00:07:00.137771+00:00","technologies":[{"hub":true,"name":"Zammad","slug":"zammad","vulnerabilities":2,"url":"https://junglewise.ai/threats/technologies/zammad"},{"hub":false,"name":"Zammad Gmbh Zammad","slug":"zammad-gmbh-zammad","vulnerabilities":2},{"hub":false,"name":"Apple Ios","slug":"apple-ios","vulnerabilities":1},{"hub":true,"name":"Apple iPadOS","slug":"ipados","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/ipados"},{"hub":true,"name":"Apple macOS","slug":"macos-tahoe","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/macos-tahoe"},{"hub":true,"name":"Apple Multiple Products","slug":"multiple-products","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/multiple-products"},{"hub":true,"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager"},{"hub":true,"name":"Citrix NetScaler","slug":"netscaler","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/netscaler"},{"hub":false,"name":"Fortinet FortiMail","slug":"fortimail","vulnerabilities":1}],"vulnerabilities":[{"cve":"CVE-2026-88779","cvss":7.5,"epss":0.0053,"slug":"cve-2026-88779-cisa-adds-one-known-exploited-vulnerability-to-catalog","title":"Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS","severity":"critical","exploited":true,"published_at":"2026-10-04T04:16:43.68+00:00","technologies":[{"hub":true,"name":"Citrix NetScaler","slug":"netscaler","vendor":{"name":"Citrix","slug":"citrix"}}],"exploited_since":"2026-10-04T20:31:03.513791+00:00","url":"https://junglewise.ai/threats/cve-2026-88779-cisa-adds-one-known-exploited-vulnerability-to-catalog"},{"cve":"CVE-2026-102490","epss":0.0026,"slug":"cve-2026-102490-all-versions-of-zammad-including-the-latest-alpha-enable-the","title":"Zammad privilege escalation to root","severity":"critical","exploited":true,"published_at":"2026-09-30T17:16:40.707+00:00","technologies":[{"hub":true,"name":"Zammad","slug":"zammad","vendor":{"name":"Zammad","slug":"zammad"}},{"hub":false,"name":"Zammad Gmbh Zammad","slug":"zammad-gmbh-zammad","vendor":{"name":"Zammad Gmbh","slug":"zammad-gmbh"}}],"exploited_since":"2026-10-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-102490-all-versions-of-zammad-including-the-latest-alpha-enable-the"},{"cve":"CVE-2026-102489","epss":0.0058,"slug":"cve-2026-102489-zammad-versions-6-3-0-to-6-5-4-are-vulnerable-a-session-hijack","title":"Zammad session hijack leading to remote code execution","severity":"critical","exploited":true,"published_at":"2026-09-30T17:16:40.55+00:00","technologies":[{"hub":true,"name":"Zammad","slug":"zammad","vendor":{"name":"Zammad","slug":"zammad"}},{"hub":false,"name":"Zammad Gmbh Zammad","slug":"zammad-gmbh-zammad","vendor":{"name":"Zammad Gmbh","slug":"zammad-gmbh"}}],"exploited_since":"2026-10-02T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-102489-zammad-versions-6-3-0-to-6-5-4-are-vulnerable-a-session-hijack"},{"cve":"CVE-2026-104286","cvss":9.8,"epss":0.022,"slug":"cve-2026-104286-fortinet-fortimail-path-traversal-vulnerability","title":"An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, F","severity":"critical","exploited":true,"published_at":"2026-10-01T20:17:24.01+00:00","technologies":[{"hub":false,"name":"Fortinet FortiMail","slug":"fortimail","vendor":{"name":"Fortinet","slug":"fortinet"}}],"exploited_since":"2026-10-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-104286-fortinet-fortimail-path-traversal-vulnerability"},{"cve":"CVE-2026-76504","cvss":9.8,"slug":"cve-2026-76504-a-vulnerability-in-the-api-session-based-authentication","title":"Cisco Catalyst SD-WAN Manager API authentication bypass","severity":"critical","exploited":true,"published_at":"2026-09-30T13:17:20.247+00:00","technologies":[{"hub":true,"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vendor":{"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-09-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-76504-a-vulnerability-in-the-api-session-based-authentication"},{"cve":"CVE-2026-86950","cvss":8.8,"epss":0.0081,"slug":"cve-2026-86950-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds","title":"Apple CoreGraphics out-of-bounds write in file processing","severity":"critical","exploited":true,"published_at":"2026-09-28T20:17:11.193+00:00","technologies":[{"hub":false,"name":"Apple Ios","slug":"apple-ios","vendor":{"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple iPadOS","slug":"ipados","vendor":{"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple macOS","slug":"macos-tahoe","vendor":{"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple macOS","slug":"macos-tahoe","vendor":{"name":"Apple","slug":"apple"}},{"hub":true,"name":"Apple Multiple Products","slug":"multiple-products","vendor":{"name":"Apple","slug":"apple"}}],"exploited_since":"2026-09-29T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-86950-an-out-of-bounds-write-issue-was-addressed-with-improved-bounds"}],"previous":{"key":"2026-09-21","top":"Citrix NetScaler","total":12,"period":{"end":"2026-09-27","start":"2026-09-21"},"critical":12,"url":"https://junglewise.ai/threats/exploited/2026-09-21"},"next":{"key":"2026-10-05","top":"@strapi/strapi (npm)","total":5,"period":{"end":"2026-10-11","start":"2026-10-05"},"critical":5,"url":"https://junglewise.ai/threats/exploited/2026-10-05"}}