IT security 2026-10-02

Level Critical — 82/100 — 2026-10-02

Critical day: 3 stories ranked, 3 of the top 3 reported as actively exploited, 3 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Fortinet FortiMail Path Traversal Vulnerability (69/100).

1. Fortinet FortiMail Path Traversal Vulnerability — 69/100 (CVE-2026-104286)
2. Zammad GmbH Zammad Session Fixation Vulnerability — 66/100 (CVE-2026-102489)
3. Zammad GmbH Zammad Improper Privilege Management Vulnerability — 65/100 (CVE-2026-102490)