TOPICS / 2 STORIES
Zammad
Every Pandromeda story on Zammad: news, explainers, comparisons and guides, newest first.
NewsZammad Zero-Days (CVE-2026-102489, CVE-2026-102490): Patch Now
CISA added both Zammad zero-days to its KEV catalog after DIVD says an AI agent chained them to hijack a session, run code, and gain root inside its own network.
NewsZammad Zero-Day Chain Exploited by AI Agent: Patch Now
An unauthenticated session-fixation RCE and a local root escalation in Zammad combine into full root takeover. CISA's KEV deadline is October 5, 2026.