Zammad Vulnerabilities Enable Remote Code Execution and Root Privilege Escalation

Two newly disclosed vulnerabilities in the Zammad open-source helpdesk platform could let attackers achieve remote code execution and then escalate to root on affected servers. DIVD CSIRT identified the flaws, tracked as CVE-2026-102489 and CVE-2026-102490, during its investigation into a separate security incident involving the organization. DIVD said the vulnerabilities were actively abused on September 21, 2026, to breach its own environment. Its researchers subsequently…