Dutch vulnerability disclosure institute reports unpatched Zammad zero-day security flaws

The Dutch Institute for Vulnerability Disclosure (DIVD) confirmed that its network was compromised by exploiting a chain of two zero-day vulnerabilities…

If your organization runs Zammad, monitor official announcements from DIVD and the Zammad team for security patches. Assess the potential impact of these vulnerabilities on your support infrastructure and implement mitigations while awaiting official fixes.