CERT24Two Zammad zero-days enabled an AI agent to breach DIVD’s networkLoading data…
CERT24Threat Observatory
Period

Two Zammad zero-days enabled an AI agent to breach DIVD’s network

The Dutch Institute for Vulnerability Disclosure (DIVD) said that the breach of its network was enabled by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. An AI agent acted autonomously, and the attacker was able to hijack sessions, execute code remotely, and obtain root privileges.

← Back to intelligence

Two Zammad zero-days enabled an AI agent to breach DIVD’s network

The Dutch Institute for Vulnerability Disclosure (DIVD) said that the breach of its network was enabled by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. An AI agent acted autonomously, and the attacker was able to hijack sessions, execute code remotely, and obtain root privileges.