BreakingZammad GmbH Zammad flaw CVE-2026-102489 is being actively exploited, CISA warns
CISA added the Zammad GmbH Zammad vulnerability to its Known Exploited Vulnerabilities catalog on October 2, 2026, with a federal remediation deadline of October 5, 2026.