Two critical zero-day vulnerabilities, tracked as CVE-2026-102489 and CVE-2026-102490, have been discovered in the Zammad customer service software. Both flaws are currently being actively exploited in the wild. Administrators are strongly advised to apply the latest security updates immediately to mitigate potential system compromise.
READ THE ORIGINAL ARTICLE AT NCSC.NL →