SecurityBleepingComputerabout 2 hours ago
DIVD Breached via Zammad Zero-Days
3 min read
DIVD disclosed that an AI agent exploited two Zammad zero-days, CVE-2026-102489 and CVE-2026-102490, to hijack sessions, run remote code, and gain root in seconds. The attacker exfiltrated data before network segmentation stopped deeper movement. DIVD urges Zammad users to upgrade to version 7 or go offline.
Level
Hype check
Tap to vote and see what everyone thinks.