AI Agent Exploits Zammad Zero-Days in DIVD Breach: What We Know and How to Detect It
Sysdig, Friday, October 2nd, 2026
Sysdig analyzes an AI agent attacker that chained two Zammad zero-days to breach DIVD and reach root in seconds.
On September 21, 2026, an agentic threat actor breached the Dutch Institute for Vulnerability Disclosure (DIVD) by chaining two previously unknown Zammad helpdesk vulnerabilities, CVE-2026-102489 and CVE-2026-102490, going from a hijacked session to root access in seconds.
DIVD described it as 'loud and very, very messy', which Sysdig links to the non-deterministic behavior of AI agents.
The post summarizes what is known so far and explains how to detect the activity.