CERT24Active exploitation of zero-day vulnerabilities in Zammad: update nowLoading data…
CERT24Threat Observatory
Period

Active exploitation of zero-day vulnerabilities in Zammad: update now

Two zero-day vulnerabilities were discovered in Zammad, a customer-service software product: CVE-2026-102489 and CVE-2026-102490. Both vulnerabilities have been actively exploited since 21 September 2026, and the likelihood of exploitation and potential damage are high.

← Back to intelligence

Active exploitation of zero-day vulnerabilities in Zammad: update now

Two zero-day vulnerabilities were discovered in Zammad, a customer-service software product: CVE-2026-102489 and CVE-2026-102490. Both vulnerabilities have been actively exploited since 21 September 2026, and the likelihood of exploitation and potential damage are high.