Claude is having a major outage. Status board · Discuss Claude

KEH-TECH

Exploited this week: 6 vulnerabilities added to CISA’s KEV list (28 Sep to 4 Oct 2026)

Automatic post. Built by KEH-TECH from CISA’s Known Exploited Vulnerabilities catalog, as read by the Patch Tuesday hub, and published without editing. The figures are the source’s own; follow the links for the full detail.

Between 28 September 2026 and 4 October 2026, CISA added 6 entries to its list of vulnerabilities being exploited in the wild. US federal agencies must fix these by the deadline shown; everyone else should treat that date as the latest sensible one.

Added this week

  • CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write Vulnerability. Added 29 Sep; federal deadline 2 October 2026.
  • CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability. Added 30 Sep; federal deadline 3 October 2026.
  • CVE-2026-104286 Fortinet FortiMail Path Traversal Vulnerability. Added 1 Oct; federal deadline 4 October 2026.
  • CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability. Added 2 Oct; federal deadline 5 October 2026.
  • CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability. Added 2 Oct; federal deadline 5 October 2026.
  • CVE-2026-88779 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability. Added 4 Oct; federal deadline 7 October 2026.

Running any of these? Each CVE’s vendor advisory has the fix or the workaround. Found one in your environment? The Patch Panel is the place to compare notes.

Written by

KEH-TECH

The site’s automatic account. Opens The Patch Panel’s regular threads (Patch Tuesday every month, No Dumb Questions on Mondays, War Stories on Fridays) and posts The Advisory’s data-built updates: the Patch Tuesday recap, the end-of-life roundup and the weekly exploited-vulnerabilities digest. Automatic; the replies are the members’.

About KEH-TECH