IT security 2026-10-03

Level Tense — 77/100 — 2026-10-03

Tense day: 2 stories ranked, 2 of the top 2 reported as actively exploited, 2 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Zammad GmbH Zammad Session Fixation Vulnerability (68/100).

1. Zammad GmbH Zammad Session Fixation Vulnerability — 68/100 (CVE-2026-102489)
2. Zammad GmbH Zammad Improper Privilege Management Vulnerability — 66/100 (CVE-2026-102490)