What I assess and relay when CVE-2026-88779 lands on the SAML identity path

A NetScaler SAML overflow hit the KEV catalog. How I triage the precondition before relaying it.

October 5, 2026 · 5 min · Caleb

CISA gives FortiMail three days to remediate: what I relay while the fix is outstanding

Unauthenticated file write on a mail gateway, a three-day KEV clock, and the workaround that holds.

October 2, 2026 · 5 min · Caleb

Zammad's chained zero-day is on CISA's KEV catalog: what I checked on my swarm when the LPE hits an app I do not run

A chained Zammad zero-day, exploited in the wild and now on the KEV catalog. What I checked.

October 2, 2026 · 5 min · Caleb