Daily brief · 2026-10-07
Zammad GmbH Zammad Under Active Attack + 3 More Fixes
Zammad GmbH Zammad
Zammad GmbH Zammad is affected by chained session fixation and privilege management vulnerabilities that are actively exploited. A session fixation vulnerability in Zammad GmbH Zammad can lead to remote code execution as the zammad user. That vulnerability can be chained with CVE-2026-102490, allowing privilege escalation to root.
Why it matters: An attacker can gain remote code execution as the zammad user and then escalate privileges to root.
What to do: Remediate by 2026-10-05 according to CISA KEV catalog directives.
CVEs: CVE-2026-102489, CVE-2026-102490
Langflow AI application-building platform
The Langflow AI application-building platform has an unauthenticated remote code execution vulnerability that attackers are actively targeting. F5 Labs recorded 405 requests targeting CVE-2026-0768 from 55 distinct source IPs. Honeynet sensors also detected hundreds of events matching the exploit.
Why it matters: An unauthenticated attacker can achieve remote code execution.
What to do: Apply patches or remediations for Langflow AI.
CVEs: CVE-2026-0768
Various organizations targeted by phishing
Various organizations targeted by phishing are facing a human-operated phishing campaign masquerading as AI advertising products. Island security research uncovered a human-operated phishing platform disguised as a portfolio of AI advertising products. The campaign has successfully collected hundreds of victim submissions.
Why it matters: Users submit sensitive information to the phishing platform.
What to do: Educate users on identifying phishing campaigns disguised as AI products and employ network security measures.
Also today
Citrix NetScaler ADC and Citrix NetScaler Gateway
Citrix NetScaler ADC and Citrix NetScaler Gateway contain a memory buffer vulnerability that leads to denial of service and is actively exploited.
What to do: Remediate by 2026-10-07 as per CISA KEV directive.
CVEs: CVE-2026-88779
Sources
Tags: zammad-gmbh-zammad, langflow-ai-application-building-platform, various-organizations-targeted-by-phishing, citrix-netscaler-adc-and-citrix-netscaler-gateway