Zammad CVE-2026-102489: Session Leak to RCE
CVE-2026-102489Horizon3.ai
Vulnerabilities and CVEs
Wed 7 Oct 202620 entries
LSN-0122-1: Kernel Live Patch Security Notice
Ubuntu Security
Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One
Infosecurity Magazine
Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws
The Hacker News
CVE-2026-97146: Apache YuniKorn: Admission control bypass via system label forgery
CVE-2026-97146oss-security
CVE-2026-92393: Apache YuniKorn: Admission control bypass via workload UPDATE operation
CVE-2026-92393oss-security CVE-2026-78243: Apache YuniKorn: LDAP Group provider panics on lowercase attribute name
CVE-2026-78243oss-security 
CVE-2026-97720: Apache Impala: Impala Executor Webserver Auth Bypass
CVE-2026-97720oss-security CVE-2026-93684: Apache Impala: Stored XSS in Impala query plans
CVE-2026-93684oss-security CVE-2026-90466: Apache Impala: Path traversal executes JARs outside trusted paths
CVE-2026-90466oss-security CVE-2026-105244: Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content
CVE-2026-105244oss-security CVE-2026-105240: Apache log4net: NUL character truncates OutputDebugStringAppender records
CVE-2026-105240oss-security CVE-2026-105243: Apache log4net: Oversize EventLogAppender record silently discarded
CVE-2026-105243oss-security CVE-2026-105242: Apache log4net: Request validation failure drops the event in the aspnet-request converter
CVE-2026-105242oss-security