AI-Powered Zammad Breach Chained Two Zero-Days
DIVD says an automated AI-driven intrusion chained Zammad CVE-2026-102489 and CVE-2026-102490 to hijack sessions, execute code, and reach root; network segmentation limited deeper movement. Upgrade to version 7 or take exposed instances offline and investigate for compromise.