#zammad
📦 zammad/zammad-api-client-php v3.2.1

PSR-compliant Zammad API client for PHP 8.1+

🔗 https://github.com/zammad/zammad-api-client-php
November 9, 2026 at 2:15 PM
Zammadの脆弱性を悪用した概念実証(PoC)エクスプロイトが公開され、セッションハイジャックとリモートコード実行が可能に

Zammadの重大な脆弱性であるCVE-2026-102489に対する概念実証(PoC)エクスプロイトが公開されました。この脆弱性により、アクティブユーザーのセッションクッキーが漏洩し、Zammadオペレーティングシステムのユーザーとしてリモートコード実行(RCE)が可能になります。

この脆弱性は、9月に発生したオランダ脆弱性情報開示研究所(DIVD)への情報漏洩事件の際に悪用されたと報じられており、CVE-2026-102490として追跡されている別のローカ...
PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution
A proof-of-concept (PoC) exploit has been released for CVE-2026-102489, a critical vulnerability in Zammad that can expose active users' session cookies and enable remote code execution (RCE) as the Z...
gbhackers.com
November 7, 2026 at 9:09 PM
💯100 Sprints and counting! 

This week, our development team kicked off Sprint #100! 🎉 A big shoutout to our development team for turning ideas and challenges into continuous improvements. 💙

On to the next 100! 🚀

#Zammad #10YearsOfZammad #OpenSource #SoftwareDevelopment
November 6, 2026 at 10:31 AM
🌍 À l’international (3)
• DIVD : L’organisme allemand a été compromis via deux vulnérabilités zero-day de Zammad (CVE-2026-102489 et CVE-2026-102490), permettant une élévation de privilèges jusqu’à root en moins de 12 minutes. (Cyberveille)
November 10, 2026 at 6:14 AM
How to Install #Zammad on #AlmaLinux #VPS (10-Minute Quick-Start Guide) This article provides a guide on how to install Zammad on #AlmaLinux VPS.

If you're looking to run a ...
Continued 👉 #opensource #certbot #elasticsearch #selfhosting #ticket #selfhosted #customersupportplatform #letsencrypt
How to Install Zammad on AlmaLinux VPS (10-Minute Quick-Start Guide)
blog.radwebhosting.com
November 3, 2026 at 7:30 AM
🚨 EUVD-2026-117049
📊 5.1/10
🏢 Zammad

📝 Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the new Vue-based ticket interface can render ticket article content ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117049

#cybersecurity #infosec #cve #euvd
November 4, 2026 at 8:03 PM
Updated Post: How to Install Zammad on AlmaLinux VPS (10-Minute Quick-Start Guide)
#Cloud #Guides #VPS
How To Install Zammad On AlmaLinux VPS (10-Minute Quick-Start Guide) - Rad Web Hosting Blog
This article provides a guide on how to install Zammad on AlmaLinux VPS.
blog.radwebhosting.com
November 3, 2026 at 2:57 PM
Two weeks ago, we celebrated 10 years of Zammad in Berlin! 💙🎉

115 customers, partners & community members joined us for inspiring talks on open source, AI & digital sovereignty.

What made the day so special? Let's take a look! 📸 https://zammad.com/en/zammad-10-years-anniversary
November 2, 2026 at 2:06 PM
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Release Date October 02, 2026

CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability
CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability
CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA
www.cisa.gov
November 2, 2026 at 2:14 PM
米国サイバーセキュリティ・インフラストラクチャセキュリティ庁(CISA)は、Zammad GmbHのZammadの脆弱性を既知の悪用された脆弱性カタログに追加した。

米国サイバーセキュリティ・インフラストラクチャセキュリティ庁(CISA)は、 既知の悪用された脆弱性(KEV)カタログに以下の脆弱性 を追加しました。

CVE-2026-102489(CVSSスコア9.4)Zammad GmbHのZammadセッション固定脆弱性
CVE-2026-102490(CVSSスコア9.4)Zammad GmbHのZammadにおける不適切な権限管理の脆弱性
最初の脆弱性であるCVE-2026-...
U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog.
securityaffairs.com
November 2, 2026 at 2:15 PM
CISAは、積極的な悪用を受けて、Zammadの脆弱性をKEVに追加した。

米国のサイバーセキュリティ・インフラストラクチャセキュリティ庁(CISA)は、Zammadヘルプデスクプラットフォームにおける2つの脆弱性について、実際に悪用されているとの報告を受け、既知の悪用脆弱性(KEV)カタログに追加した。

米国のサイバーセキュリティ・インフラストラクチャセキュリティ庁(CISA)は、Zammadヘルプデスクプラットフォームにおける2つの脆弱性について、実際に悪用されているとの報告を受け、既知の悪用脆弱性(KEV)カタログに追加した。
CISA Adds Zammad Vulnerabilities to KEV Following Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities in the Zammad helpdesk platform to its Known Exploited Vulnerabilities (KEV) Catalog following reports of...
gbhackers.com
November 3, 2026 at 10:51 PM
China-nexus actor Vapor Panda runs autonomous AI agents against 200+ orgs in 14 countries - one went from initial access to root in 12 minutes via a Zammad zero-day. Full breakdown: https://www.linkedin.com/feed/update/urn:li:share:7523167257762369536/
November 2, 2026 at 11:40 PM
自律型AIエージェントが機械速度のサイバー攻撃でZammadの2つのゼロデイ脆弱性を連鎖的に攻撃

自律型AIエージェントが、Zammadヘルプデスクプラットフォームに存在するこれまで未公開だった2つの脆弱性を連鎖的に利用し、オランダ脆弱性開示研究所(DIVD)に侵入した。これにより、最初のアプリケーション侵害からわずか数秒でルートアクセスへと移行した。

この事件は、攻撃者が前日にDIVDシステムにアクセスした後、9月22日に初めて検知されたもので、エージェント型攻撃がいかに偵察、悪用、権限昇格、データ窃盗を機械的な速度で実行できるかを示す鮮明な例となっている。
Autonomous AI Agent Chains Two Zammad Zero-Days in Machine-Speed Cyberattack
An autonomous AI agent breached the Dutch Institute for Vulnerability Disclosure (DIVD) after chaining two previously undisclosed flaws in the Zammad helpdesk platform.
gbhackers.com
November 3, 2026 at 10:53 PM
New from Saluca Labs: "Zammad Zero-Day Chain: A Detection Engineering Analysis of an AI Agent Session Hijack to Root". Open on Zenodo: https://doi.org/10.5281/zenodo.23378572
November 1, 2026 at 8:49 PM
How to Install #Zammad on #AlmaLinux #VPS (10-Minute Quick-Start Guide) This article provides a guide on how to install Zammad on #AlmaLinux VPS.

If you're looking to run a ...
Continued 👉 #certbot #elasticsearch #opensource #letsencrypt #customersupportplatform #selfhosting #selfhosted #ticket
How to Install Zammad on AlmaLinux VPS (10-Minute Quick-Start Guide)
blog.radwebhosting.com
October 30, 2026 at 6:30 AM
米当局、脆弱性4件を「悪用脆弱性リスト」に追加 - 早期対応を要請

米サイバーセキュリティインフラストラクチャセキュリティ庁(CISA)は、現地時間2026年10月1日から4日にかけて脆弱性4件を「悪用が確認された脆弱性カタログ(KEV)」へ追加した。

対象となるのは、「FortiMail」「Zammad」「NetScaler ADC」「NetScaler Gateway」で、脆弱性はあわせて4件。具体的に見ると、10月1日には、Fortinetの「FortiMail」におけるパストラバーサルの脆弱性「CVE-2026-104286」を追加した。

細工したHTTPリクエストにより、...
【セキュリティ ニュース】米当局、脆弱性4件を「悪用脆弱性リスト」に追加 - 早期対応を要請(1ページ目 / 全1ページ):Security NEXT
米サイバーセキュリティインフラストラクチャセキュリティ庁(CISA)は、現地時間2026年10月1日から4日にかけて、脆弱性4件を「悪用が確認された脆弱性カタログ(KEV)」へ追加した。 :Security NEXT
www.security-next.com
November 4, 2026 at 12:50 PM
A few worth trying: GLPI (ticketing + inventory, mature, pairs well with Snipe-IT), Zammad (good for email-first support), and iTop if you want ITIL-style CMDB. Pick by intake channel and how much ITIL you need, then test with a real week of tickets.
October 30, 2026 at 3:10 PM
Updated Post: How to Install Zammad on AlmaLinux VPS (10-Minute Quick-Start Guide)
#Cloud #Guides #VPS
How To Install Zammad On AlmaLinux VPS (10-Minute Quick-Start Guide) - Rad Web Hosting Blog
This article provides a guide on how to install Zammad on AlmaLinux VPS.
blog.radwebhosting.com
October 22, 2026 at 11:11 PM
How to Install #Zammad on #AlmaLinux #VPS (10-Minute Quick-Start Guide) This article provides a guide on how to install Zammad on #AlmaLinux VPS.

If you're looking to run a ...
Continued 👉 #letsencrypt #certbot #opensource #ticket #selfhosted #selfhosting #elasticsearch #customersupportplatform
How to Install Zammad on AlmaLinux VPS (10-Minute Quick-Start Guide)
blog.radwebhosting.com
October 21, 2026 at 8:30 PM
Autonomous AI Agent Weaponization: Chaining Zero-Days in Enterprise Zammad Helpdesk Environments + Video

Introduction: Recent security disclosures reveal a watershed moment in automated cyber warfare, where an autonomous AI agent successfully chained two critical 9.4-severity zero-day…
Autonomous AI Agent Weaponization: Chaining Zero-Days in Enterprise Zammad Helpdesk Environments + Video
Introduction: Recent security disclosures reveal a watershed moment in automated cyber warfare, where an autonomous AI agent successfully chained two critical 9.4-severity zero-day vulnerabilities within a production Zammad helpdesk ticketing system. This unprecedented incident bypassed traditional perimeter defenses through rapid session hijacking, remote code execution (RCE), and root privilege escalation in mere seconds, highlighting the urgent need for robust architectural guardrails for autonomous agents.
undercodetesting.com
October 21, 2026 at 9:38 PM
⚠️ We updated our privacy policy! ⚠️ Did we scare you there? 🎃
No need to worry, we actually just removed one more third party data processor. After Zammad, we now also replaced Brevo with an in-house solution 🗞️
October 19, 2026 at 7:48 PM
🎉 10 years of Zammad. Seven major releases. Countless features.

From browser-style tabs and multichannel support to AI Agents, we've come a long way since 2016!

Get a sneak peek at what's next: https://zammad.com/en/blog/10-years-of-zammad-from-the-first-release-to-ai
October 19, 2026 at 1:18 PM
The Army wants AI agents that worm through enemy networks, then self-destruct. One already did the demo run — it chained two zero-days and walked out with the files.

https://ainewspage.com/cartoons/2026-10-18-zammad-divd-breach/?utm_source=bluesky&utm_medium=speed-reply&utm_campaign=reply-guy
October 19, 2026 at 8:32 PM
📦 ligoo/zammad-laravel v1.1.0

Laravel package for Zammad ticketing system integration with contact form

🔗 https://github.com/ligoo/zammad-laravel
October 17, 2026 at 8:19 PM
'Banned, appealed, never heard back' becomes a Steam review. Zammad (6k★, AGPL-3.0), an open-source Zendesk alternative, files each player report and ban appeal as a ticket under an SLA policy. The gap: its knowledge base trails Zendesk Guide.
ossfind.com/alternatives/zendesk/
#gamedev #indiedev
October 17, 2026 at 11:47 AM