Forwarded from TWCERTCC Cybersecurity Alert TWCERTCC-200-202610-00000002

【CVE-2026-86950】Apple Multiple Products Out-of-Bounds Write Vulnerability (CVSS v3.1: 8.8)
【Whether exploited by ransomware: Unknown】Apple iOS, macOS, and iPadOS contain an Out-of-Bounds Write vulnerability in CoreGraphics, which may result in arbitrary code execution.

【CVE-2026-76504】Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】Cisco Catalyst SD-WAN Manager contains a Hex Encoding vulnerability. Due to improper handling of URI encoding in HTTP requests, an unauthenticated remote attacker may exploit this vulnerability to access an affected system with administrator privileges.

【CVE-2026-104286】Fortinet FortiMail Path Traversal Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】Fortinet FortiMail contains a Path Traversal vulnerability, which may allow an unauthenticated attacker to write arbitrary files to the underlying system through specially crafted HTTP or HTTPS requests.

【CVE-2026-102490】Zammad GmbH Zammad Improper Privilege Management Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】Zammad GmbH Zammad contains an Improper Privilege Management vulnerability, which may allow the local zammad user to escalate privileges to root.

【CVE-2026-102489】Zammad GmbH Zammad Session Fixation Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】Zammad GmbH Zammad contains a Session Fixation vulnerability, which may allow an attacker to remotely execute arbitrary code as the zammad user.

【CVE-2026-88779】Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVSS v4.0: 8.7)
【Whether exploited by ransomware: Unknown】Citrix NetScaler ADC and Citrix NetScaler Gateway contain an Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability, which may result in denial of service.