https://vulnerability.circl.lu/sightings/feed 2026-10-02T13:14:45.022168+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3e2ac995-02b5-489b-b762-1cf0b1f2b1f3/export 2026-10-02T13:14:45.052454+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3e2ac995-02b5-489b-b762-1cf0b1f2b1f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102490", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mwvetd7rhn25", "content": "Critieke Zammad-kwetsbaarheden leiden tot potenti\u00eble root-toegang en data-inbreu\n\nTwee kritieke kwetsbaarheden, bekend als CVE-2026-102489 en CVE-2026-102490, zijn ontdekt in Zammad en mogelijk reeds uitgebuit tegen het Dutch Institute for Vulnerability Disclosure (DIVD). Deze kwetsbaarheden...", "creation_timestamp": "2026-10-02T12:30:30.082168Z"} 2026-10-02T12:30:30.082168+00:00 https://vulnerability.circl.lu/sighting/c1836a89-89fa-4b0e-9f8e-0abc868c50f0/export 2026-10-02T13:14:45.056002+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c1836a89-89fa-4b0e-9f8e-0abc868c50f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102490", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwuhyenar32a", "content": "Attackers exploited Zammad zero-day flaws CVE-2026-102489 and CVE-2026-102490 to gain root at DIVD. Upgrade to Zammad 7 or go offline.\n\n#Zammad #ZeroDay #CVE2026102489 #CVE2026102490 #DIVD #AIAgent #ExploitedInTheWild", "creation_timestamp": "2026-10-02T03:54:21.259889Z"} 2026-10-02T03:54:21.259889+00:00 https://vulnerability.circl.lu/sighting/1fb978be-5cd5-4330-b973-1313a6e83927/export 2026-10-02T13:14:45.056162+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "1fb978be-5cd5-4330-b973-1313a6e83927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-102490", "type": "seen", "source": "https://www.acn.gov.it/portale/w/zammad-rilevato-sfruttamento-in-rete-delle-cve-2026-102489-e-cve-2026-102490", "content": "", "creation_timestamp": "2026-10-02T00:14:42.000000Z"} 2026-10-02T00:14:42+00:00 https://vulnerability.circl.lu/sighting/8977f8be-4a47-4142-85fd-d617f60beb0b/export 2026-10-02T13:14:45.057824+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8977f8be-4a47-4142-85fd-d617f60beb0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102490", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mwtyjck7cp26", "content": "DIVD was breached via two zero-day vulnerabilities in its Zammad ticketing system, tracked as CVE-2026-102489 and CVE-2026-102490. An AI agent enabled attackers to escalate privileges to root access within seconds, allowing data theft and lateral movement to other services.", "creation_timestamp": "2026-10-01T23:17:29.779941Z"} 2026-10-01T23:17:29.779941+00:00 https://vulnerability.circl.lu/sighting/4308c8d7-fcd3-4be5-895a-03d54fc4481f/export 2026-10-02T13:14:45.057966+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4308c8d7-fcd3-4be5-895a-03d54fc4481f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102490", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/001ddc38-48ab-4017-8d21-a67300513e14", "content": "", "creation_timestamp": "2026-10-01T19:00:24.788979Z"} 2026-10-01T19:00:24.788979+00:00 https://vulnerability.circl.lu/sighting/3286994b-7538-41dc-8ef5-644c419bce37/export 2026-10-02T13:14:45.058074+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3286994b-7538-41dc-8ef5-644c419bce37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102490", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwtelisvkt2k", "content": "Dutch security institute DIVD hacked by 'agentic AI-powered attack' exploiting two Zammad zero-days (CVE-2026-102489, CVE-2026-102490). Attackers chained RCE & privesc flaws. All Zammad users urged to patch. #ZeroDay #AI #CyberAttack #Zammad\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-10-01T17:20:48.053779Z"} 2026-10-01T17:20:48.053779+00:00 https://vulnerability.circl.lu/sighting/eb155973-e7ca-4a27-847e-504238f38bb5/export 2026-10-02T13:14:45.058188+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "eb155973-e7ca-4a27-847e-504238f38bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102490", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117366798404169546", "content": "\ud83d\udcf0 Dutch Security Institute Hacked via AI-Powered Zammad Zero-Days\nDutch security institute DIVD hacked by 'agentic AI-powered attack' exploiting two Zammad zero-days (CVE-2026-102489, CVE-2026-102490). Attackers chained RCE & privesc flaws. All Zammad users urged to patch. #ZeroDay #AI #CyberAttack #Zammad\n\ud83d\udd17 https://cyber.netsecops.io/articles/dutch-security-institute-divd-hacked-via-ai-powered-zammad-zero-days/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-10-01T17:20:47.256024Z"} 2026-10-01T17:20:47.256024+00:00 https://vulnerability.circl.lu/sighting/3d834ecc-80ce-4723-b0dc-2e7c52117ade/export 2026-10-02T13:14:45.058294+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3d834ecc-80ce-4723-b0dc-2e7c52117ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102490", "type": "seen", "source": "https://t.me/true_secator/8668", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0441\u043e \u0432\u0437\u043b\u043e\u043c\u043e\u043c \u0413\u043e\u043b\u043b\u0430\u043d\u0434\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (DIVD).\n\n\u041a\u0430\u043a \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0435\u0433\u043e \u0441\u0435\u0442\u0438 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0438\u0437 \u0434\u0432\u0443\u0445 0-day \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u044f\u0432\u043e\u043a \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Zammad.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0432 DIVD \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u044f\u0432\u043b\u044f\u043b\u0438, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u00ab\u0433\u0440\u043e\u043c\u043a\u043e\u0439 \u0438 \u043e\u0447\u0435\u043d\u044c, \u043e\u0447\u0435\u043d\u044c \u0445\u0430\u043e\u0442\u0438\u0447\u043d\u043e\u0439\u00bb, \u0438 \u043f\u0440\u0438\u0442\u043e\u043c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e \u0438 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043e \u0441\u0432\u043e\u0438\u0445 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0448\u0430\u0433\u0430\u0445 \u0431\u0435\u0437 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0438\u043b\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0439.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0418\u0418-\u0430\u0433\u0435\u043d\u0442 \u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u043e\u0441\u043b\u0435 \u0441\u0435\u0431\u044f \u0447\u0435\u0442\u043a\u0438\u0435 \u043e\u0431\u044a\u044f\u0441\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439, DIVD \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u0448\u0438\u0440\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u0430\u0440\u0442\u0438\u043d\u0443 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u043a\u0430\u043a CVE-2026-102489 \u0438 CVE-2026-102490, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u0438, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u041f\u043e\u0441\u043b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c, \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c DIVD, \u043f\u0440\u0438\u0447\u0435\u043c \u0432\u0441\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b \u0437\u0430 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u043a\u0443\u043d\u0434\u044b \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418.\n\n\u0422\u0430\u043a\u043e\u0439 \u0441\u0438\u043c\u0431\u0438\u043e\u0437 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u0438, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u0434 \u0438 \u0437\u0430 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u043a\u0443\u043d\u0434\u044b \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f Zammad \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0430\u0433\u0435\u043d\u0442\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u044d\u0442\u043e\u0439 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0430\u0442\u0430\u043a\u0438.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 \u0438 \u043c\u0435\u0440\u0430\u043c \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0433\u043b\u0443\u0431\u0436\u0435 \u0432 \u0441\u0435\u0442\u044c. \u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.\n\nZammad - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u044f\u0432\u043e\u043a \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0418\u0422-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0430\u044f \u0418\u0418 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u0432 \u0418\u0422-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c\u0438 \u0437\u0430\u044f\u0432\u043a\u0430\u043c\u0438.\n\n\u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u043a\u0430\u043a \u0432 \u0432\u0438\u0434\u0435 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e, \u0442\u0430\u043a \u0438 \u0432 \u0432\u0438\u0434\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c Zammad \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 2000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 55 000 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0435\u0441\u0442\u044c \u0432 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0438\u0445 De'Longhi, Amnesty International \u0438 NextCloud.\n\nDIVD \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0437\u0438\u0440\u043e\u0434\u0435\u0438 \u0432 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0441 Merlon Security, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 Zammad \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445.\n\nDIVD \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Zammad \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439, \u0438\u043b\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435. \u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043e\u0431\u0435\u0449\u0430\u043b\u0430 \u043f\u043e\u0437\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435.", "creation_timestamp": "2026-10-01T14:24:35.000000Z"} 2026-10-01T14:24:35+00:00 https://vulnerability.circl.lu/sighting/c700bccb-2aa8-4ffd-a374-b9dd0c197cde/export 2026-10-02T13:14:45.058450+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c700bccb-2aa8-4ffd-a374-b9dd0c197cde", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102490", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/307e63c8-7bfd-4929-8a7b-8ccb5c4f543e", "content": "", "creation_timestamp": "2026-10-01T08:00:02.440108Z"} 2026-10-01T08:00:02.440108+00:00 https://vulnerability.circl.lu/sighting/b3e6c12d-579f-4a0e-be3b-a801d18fc041/export 2026-10-02T13:14:45.058557+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b3e6c12d-579f-4a0e-be3b-a801d18fc041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102490", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwsch3i2bh2f", "content": "Zammad helpdesk zero-days CVE-2026-102489 and CVE-2026-102490 let an AI agent breach DIVD: session hijack to root in seconds. Upgrade to Zammad 7 or take older instances offline. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-01T07:09:52.273851Z"} 2026-10-01T07:09:52.273851+00:00