PoC Released for Zammad Session Leak Flaw Enabling Remote Code Execution
Horizon3.ai released a PoC for Zammad CVE-2026-102489 that leaks session cookies and can yield remote code execution.
6
Stories per day · 30 days
4 RSS
16 stories, newest first · one card per story
Stories tagged #divd
PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution
Researchers released a PoC for critical Zammad flaw CVE-2026-102489 enabling session hijacking and remote code execution.
1
Zammad Zero-Day Chain Lets AI Agent Hijack Sessions, Execute Code and Escalate to Root
An AI agent chained Zammad zero-days CVE-2026-102489 and CVE-2026-102490 to breach DIVD, reaching root in seconds and stealing volunteer emails.
CISA Warns of Zammad DIVD Vulnerabilities Actively Exploited in Attacks
CISA warned that two exploited Zammad flaws can be chained into full helpdesk server takeover.
Autonomous AI Agent Chains Two Zammad Zero-Days in Machine-Speed Cyberattack
An autonomous AI agent chained two Zammad zero-days to root Dutch DIVD and steal volunteer contacts.
U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog
CISA added two exploited Zammad zero-days to KEV after attackers chained them to breach DIVD.
Zammad Vulnerabilities Let Attackers Execute Code and Escalate Privileges to Root
Chained Zammad flaws CVE-2026-102489/102490 enable session hijacking, RCE, and root escalation; already used against DIVD.
2
Zammad 0-Day Vulnerabilities Exploited to Gain Remote Code Execution and Root Access
Attackers exploited two Zammad zero-days for remote code execution and root, including a breach of DIVD.
Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure
Attackers exploited two Zammad zero-days to breach DIVD, reach root, and steal volunteer contact data.
AI agents hacked the hackers, stealing email addresses from security research org
Attackers chained two Zammad zero-days to breach DIVD and steal volunteer researchers' email addresses.
AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit
Attackers used an agentic AI to chain two Zammad zero-days into DIVD's network, hijacking sessions, gaining root, and exfiltrating data on September 21.
Zammad Zero-Days Exploited in AI-Powered DIVD Hack
Attackers exploited two Zammad zero-days in an AI-driven intrusion that hit the Dutch Institute for Vulnerability Disclosure.
AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds
Chained Zammad zero-days let an AI agent breach DIVD, gain root in seconds, and exfiltrate data; users urged to update to version 7.
DIVD says Zammad zero-days enabled AI-driven network breach
An autonomous AI agent used two Zammad zero-days to breach DIVD, gain root, and exfiltrate data within seconds.
Automated AI agent used to breach cybersecurity nonprofit DIVD
DIVD says an autonomous AI agent exploited a flaw and performed a messy intrusion on its network.
DIVD Dutch Institute for Vulnerability Disclosure investigating agentic AI-powered attack
DIVD says it is investigating an apparent agentic AI-powered attack against the Dutch nonprofit.