CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA added two actively exploited Zammad flaws, session fixation and improper privilege management, to the KEV catalog.
Stories per day · 30 days
4 stories, newest first · one card per story
Stories tagged #privilege-management
CVE-2026-59797: Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function
Apache mod_ssl through 2.4.68 lets SSLRequire .htaccess expressions call file functions, a low-severity issue.
Sudo Vulnerability Lets Attackers Bypass Time-Based Authorization Controls
CVE-2026-96512 lets local users skew Sudo time-based authorization windows via the TZ variable.
5
Idira Archives
Unit 42 page describes Idira, a Palo Alto Networks product providing dynamic privilege controls and zero standing privilege for AI agents.