Cybersecuritynews2026-10-05 08:32:23

CISA Warns of Zammad DIVD Vulnerabilities Actively Exploited in Attacks

Summary

The U.S. Cybersecurity and Infrastructure Security Agency has added two Zammad vulnerabilities to its Known Exploited Vulnerabilities catalog after reports that attackers are actively exploiting at least one flaw. The issues, tracked as CVE-2026-102489 and CVE-2026-102490, can be chained to gain high-level control of affected Zammad helpdesk servers.

cyber securitycyber security newsvulnerabilities

This is a brief wire summary, the full story (linked below) has the complete details.

KazaSec's take

Incidents like this rarely start with the headline event itself, they usually trace back to an exposed remote-access endpoint, an unpatched perimeter system, or a credential phished weeks earlier. The organizations that recover fastest are the ones that tested their defenses and their incident response plan before they needed them.

Coverage details

Source: Cybersecuritynews
Published: 2026-10-05 08:32:23
Author: abinaya
Category: technologytop

We've archived 122 other articles touching the same topic (cyber security, cyber security news, vulnerabilities) , see the full security news archive.

Worried this kind of story could be about you next?

We help organizations find and fix the gaps before they make headlines.

Request a Security Assessment Browse Services