Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
Zammad 0-Day Vulnerabilities Exploited to Gain Remote Code Execution and Root Access
Two critical Zammad zero-day flaws, reportedly exploited against the Dutch Institute for Vulnerability Disclosure (DIVD), could allow session hijacking, remote command execution as the Zammad service user, and potential root privilege escalation. The vulnerabilities are tracked as CVE-2026-102489 and CVE-2026-102490. DIVD published the findings under case DIVD-2026-00015 after investigating a separate breach case involving its […] The post Zammad 0-Day Vulnerabilities Exploited to Gain Remote Code Execution and Root Access appeared first on Cyber Security News.
Two critical Zammad zero-day flaws, reportedly exploited against the Dutch Institute for Vulnerability Disclosure (DIVD), could allow session hijacking, remote command execution as the Zammad service user, and potential root privilege escalation. The vulnerabilities are tracked as CVE-2026-102489 and CVE-2026-102490. DIVD published the findings under case…
Excerpt shown under the publisher's RSS terms · 46 words · full text and figures are on the publisher's site
Related coverage
PoC Released for Zammad Session Leak Flaw Enabling Remote Code Execution
Cybersecurity News · Oct 8, 2026
AI agent exploits Zammad zero-days in DIVD breach: What we know and how to detect it
Sysdig Blog · Oct 6, 2026
Zammad Zero-Day Chain Lets AI Agent Hijack Sessions, Execute Code and Escalate to Root
Cybersecurity News · Oct 5, 2026
Weekly Cybersecurity Newsletter Bulletin – Cisco and Android 0-Day, BragJack Attack, Claude Opus 5 Used to Hack OpenAI, and 20+ Stories
Cybersecurity News · Sep 21, 2026