Attackers exploited Zammad zero-day flaws CVE-2026-102489 and CVE-2026-102490 to gain root at DIVD. Upgrade to Zammad 7 or go offline. Related Posts: Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic Server Microsoft Reissues September 2026 Exchange Server Security Updates to Add CVE-2026-96940 AWS Fixes Loom for AWS Admin Takeover and SageMaker Unified Studio Code Execution Flaws The post Zammad Zero-Day Chain CVE-2026-102489 Exploited in the Wild