Critical 9.4
CVE-2026-102489
Autonomous AI Agent Exploits Zammad Zero-Days to Breach DIVD Infrastructure
Vendor / product: Zammad
Event date: 2026-09-21
Victim organization: Dutch Institute for Vulnerability Disclosure
Public PoC: Yes
First tracked by RiskWire: 2026-10-01
Sources & citations (9)
- AI Agent Breaches Dutch Cybersecurity Organisation DIVD Through Two Zero-Day Software Vulnerabilities the420.in · 2026-09-30
- An Autonomous AI Agent Just Breached a Vulnerability Disclosure Nonprofit by Chaining Two Zammad Zero-Days tech.yahoo.com · 2026-10-01
- DIVD says Zammad zero-days enabled AI-driven network breach hendryadrian.com · 2026-09-30
- Σοβαρή δικτυακή παραβίαση στη DIVD μέσω δύο ευπαθειών στο Zammad secnews.gr · 2026-09-30
- Siber Güvenlik Kuruluşu DIVD'yi Yapay Zeka Ajanıyla Hacklediler nuvemmag.com · 2026-09-30
- DIVD Says Autonomous AI Agent Breached Its Network, Messily aiweekly.co · 2026-09-30
- AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds securityaffairs.com · 2026-10-01
- DIVD piraté via Zammad : les preuves sur l'agent IA linformatique.org · 2026-09-30
- DIVD Links Zammad Zero-Days to AI-Accelerated Breach news-pravda.com · 2026-10-01
References
See CVE-2026-102489 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →