AI agent exploits zero-day flaws in Zammad ticketing system

The Dutch Institute for Vulnerability Disclosure (DIVD) has reported a significant network breach facilitated by an autonomous AI agent that exploited two zero-day vulnerabilities in the open-source Zammad ticketing system.