Dutch Institute Attributes Network Intrusion to Chain of Zammad Zero-Day Flaws

The Dutch Institute for Vulnerability Disclosure (DIVD) has confirmed that a recent breach of its own network was facilitated by a pair of undisclosed zero‑day flaws in the open‑source Zammad ticketing platform, which attackers chained together to gain access and then employed AI‑driven tools to navigate the environment.

Zammad, a web‑based help‑desk solution written in Ruby on Rails, is widely used by enterprises and public‑sector organizations for managing support tickets and internal communications. Its open‑source nature encourages community contributions, but also means that security patches depend on timely discovery and coordinated disclosure.

Zero‑day vulnerabilities are software bugs that are unknown to the vendor and therefore lack an existing fix. Exploiting two such flaws in succession is uncommon and typically requires sophisticated techniques. According to DIVD, the attackers leveraged automated analysis and generative AI to identify the exploitation path, accelerating what would otherwise be a labor‑intensive process.

DIVD’s internal audit team detected anomalous activity in early May, prompting a forensic review that uncovered the dual‑exploit chain. The investigation revealed that the first vulnerability allowed remote code execution, while the second granted elevated privileges within the Zammad environment, effectively opening a backdoor for the AI‑assisted intrusion.

The incident highlights growing concerns about the security of widely deployed open‑source tools, especially as threat actors adopt AI to streamline vulnerability discovery and exploitation. Security researchers have warned that the combination of unpatched zero‑days and automated attack frameworks could increase the frequency of high‑impact breaches across sectors that rely on community‑maintained software.

In response, the Zammad development team issued emergency patches for both flaws and urged all users to apply updates immediately. DIVD has also released a technical advisory recommending network segmentation, strict access controls, and continuous monitoring for signs of AI‑augmented attacks. The institute plans to collaborate with other vulnerability‑disclosure entities to share indicators of compromise and improve collective defenses against similar threats.