DIVD says Zammad zero-days enabled AI-driven network breach

September 30, 2026 · BleepingComputer · Severity: CRITICAL

The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system.

Key Takeaways

According to BleepingComputer, this development warrants attention from teams monitoring the evolving threat landscape.
Given the CRITICAL severity, organizations should prioritize remediation in their vulnerability management workflow.
Security teams should review their exposure and implement appropriate defensive controls.