Zammad Zero-Days CVE-2026-102489 and CVE-2026-102490: Chained Session-Fixation to Root, Now on CISA KEV — Upgrade to 7.2.0
If you run Zammad — the open-source helpdesk and ticketing platform — as your customer support inbox, stop reading and check your version. CISA just added two actively exploited flaws to its Known Exploited Vulnerabilities…