AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds
ID: eda96d95-7991-59a1-b274-3ec5fa59c772
STIX ID: report--eda96d95-7991-59a1-b274-3ec5fa59c772
Feed Name: Security Affairs
Threat Score
DIVD disclosed a breach caused by two Zammad zero‑days (CVE-2026-102489, CVE-2026-102490) that were chained and automated by an AI agent to hijack sessions, execute code, escalate to root in seconds, access other services and exfiltrate data; DIVD and Zammad advise immediate patching to version 7 or taking instances offline while investigations continue.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.