zammad gmbh News Articles

PoC Released for Zammad Session Leak Flaw Enabling Remote Code Execution

Public PoC released for CVE-2026-102489, a critical Zammad flaw enabling unauthenticated session cookie theft and potential code execution.

1 month ago

PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution - IT Security News

2026-10-08 15:10 A proof-of-concept (PoC) exploit has been released for CVE-2026-102489, a critical vulnerability in Zammad that can expose active users’ session cookies and enable remote...

1 month ago

CISA Warns of Zammad DIVD Vulnerabilities Actively Exploited in Attacks

CISA added two Zammad flaws to its KEV catalog after active exploitation reports, the flaws can be chained for high-level server control.

1 month ago

Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days

Dutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote code execution and root access.

AI agents hacked the hackers, stealing email addresses from security research org

Chained Zammad flaws enabled session hijacking, code execution, and root escalation in seconds

AI agents hacked the hackers, stealing email addresses from security research org

Chained Zammad flaws enabled session hijacking, code execution, and root escalation in seconds

AI Agent Hacked Cybersecurity Nonprofit DIVD via Zammad Zero-Days; Root Flaw Unpatched

Zammad zero-day vulnerabilities CVE-2026-102489 and CVE-2026-102490 were chained by an autonomous AI agent to breach cybersecurity nonprofit DIVD on September 21, 2026, reaching root access in