{"post_stream":{"posts":[{"id":64925,"name":"DD","username":"DD4PK","avatar_template":"/letter_avatar_proxy/v4/letter/d/a9adbd/{size}.png","created_at":"2026-10-01T06:36:43.676Z","cooked":"\u003cp\u003eAffected versions 1.5 to 7.1.0-alpha\u003c/p\u003e\n\u003cp\u003eNo user interaction required. If your instance is publicly exposed - patch urgently.\u003c/p\u003e\n\u003caside class=\"onebox allowlistedgeneric\" data-onebox-src=\"https://previdian.com/CVE-2026-102490\"\u003e\n  \u003cheader class=\"source\"\u003e\n      \u003cimg src=\"https://previdian.com/favicon.ico\" class=\"site-icon\" alt=\"\" width=\"256\" height=\"256\"\u003e\n\n      \u003ca href=\"https://previdian.com/CVE-2026-102490\" target=\"_blank\" rel=\"noopener nofollow ugc\"\u003ePrevidian\u003c/a\u003e\n  \u003c/header\u003e\n\n  \u003carticle class=\"onebox-body\"\u003e\n    \u003cdiv class=\"aspect-image\" style=\"--aspect-ratio:690/361;\"\u003e\u003cimg src=\"https://previdian.com/CVE-2026-102490/og.png?v=1790786427\" class=\"thumbnail\" alt=\"\" width=\"690\" height=\"362\"\u003e\u003c/div\u003e\n\n\u003ch3\u003e\u003ca href=\"https://previdian.com/CVE-2026-102490\" target=\"_blank\" rel=\"noopener nofollow ugc\"\u003eCVE-2026-102490 Exploited in the Wild — Zammad | Previdian\u003c/a\u003e\u003c/h3\u003e\n\n  \u003cp\u003eCVE-2026-102490 exploitation intelligence for Zammad: confirmed exploitation in the wild, CISA KEV status, and timeline.\u003c/p\u003e\n\n\n  \u003c/article\u003e\n\n  \u003cdiv class=\"onebox-metadata\"\u003e\n    \n    \n  \u003c/div\u003e\n\n  \u003cdiv style=\"clear: both\"\u003e\u003c/div\u003e\n\u003c/aside\u003e\n\n\u003cp\u003eMore info here:\u003c/p\u003e\n\u003caside class=\"onebox allowlistedgeneric\" data-onebox-src=\"https://csirt.divd.nl/cases/DIVD-2026-00015/\"\u003e\n  \u003cheader class=\"source\"\u003e\n\n      \u003ca href=\"https://csirt.divd.nl/cases/DIVD-2026-00015/\" target=\"_blank\" rel=\"noopener nofollow ugc\"\u003eDIVD CSIRT\u003c/a\u003e\n  \u003c/header\u003e\n\n  \u003carticle class=\"onebox-body\"\u003e\n    \n\n\u003ch3\u003e\u003ca href=\"https://csirt.divd.nl/cases/DIVD-2026-00015/\" target=\"_blank\" rel=\"noopener nofollow ugc\"\u003eDIVD-2026-00015 - Vulnerabilities in Zammad during investigation of case...\u003c/a\u003e\u003c/h3\u003e\n\n  \u003cp\u003eMultiple vulnerabilities found in Zammad including a Undisclosed RCE in Zammad version higher then 6.3 and a Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha.\u003c/p\u003e\n\n\n  \u003c/article\u003e\n\n  \u003cdiv class=\"onebox-metadata\"\u003e\n    \n    \n  \u003c/div\u003e\n\n  \u003cdiv style=\"clear: both\"\u003e\u003c/div\u003e\n\u003c/aside\u003e\n\n\u003cp\u003eAnd BleepingComputer:\u003c/p\u003e\n\u003caside class=\"onebox allowlistedgeneric\" data-onebox-src=\"https://www.bleepingcomputer.com/news/security/divd-says-zammad-zero-days-enabled-ai-driven-network-breach/\"\u003e\n  \u003cheader class=\"source\"\u003e\n      \u003cimg src=\"https://www.bleepstatic.com/favicon/bleeping.ico\" class=\"site-icon\" alt=\"\" width=\"32\" height=\"32\"\u003e\n\n      \u003ca href=\"https://www.bleepingcomputer.com/news/security/divd-says-zammad-zero-days-enabled-ai-driven-network-breach/\" target=\"_blank\" rel=\"noopener nofollow ugc\"\u003eBleepingComputer\u003c/a\u003e\n  \u003c/header\u003e\n\n  \u003carticle class=\"onebox-body\"\u003e\n    \u003cdiv class=\"aspect-image\" style=\"--aspect-ratio:690/387;\"\u003e\u003cimg src=\"https://www.bleepstatic.com/content/hl-images/2026/09/30/zammad.jpg\" class=\"thumbnail\" alt=\"\" width=\"690\" height=\"388\"\u003e\u003c/div\u003e\n\n\u003ch3\u003e\u003ca href=\"https://www.bleepingcomputer.com/news/security/divd-says-zammad-zero-days-enabled-ai-driven-network-breach/\" target=\"_blank\" rel=\"noopener nofollow ugc\"\u003eDIVD says Zammad zero-days enabled AI-driven network breach\u003c/a\u003e\u003c/h3\u003e\n\n  \u003cp\u003eThe Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system.\u003c/p\u003e\n\n\n  \u003c/article\u003e\n\n  \u003cdiv class=\"onebox-metadata\"\u003e\n    \n    \n  \u003c/div\u003e\n\n  \u003cdiv style=\"clear: both\"\u003e\u003c/div\u003e\n\u003c/aside\u003e\n","post_number":1,"post_type":1,"posts_count":3,"updated_at":"2026-10-01T06:52:53.530Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":147,"reads":40,"readers_count":39,"score":260.4,"yours":false,"topic_id":21297,"topic_slug":"take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited","display_username":"DD","primary_group_name":null,"flair_name":null,"flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":null,"badges_granted":[],"version":3,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"https://previdian.com/CVE-2026-102490","internal":false,"reflection":false,"title":"CVE-2026-102490 Exploited in the Wild — Zammad | Previdian","clicks":8},{"url":"https://csirt.divd.nl/cases/DIVD-2026-00015/","internal":false,"reflection":false,"title":"DIVD-2026-00015 - Vulnerabilities in Zammad during investigation of case DIVD-2026-00014 | DIVD CSIRT","clicks":6},{"url":"https://www.bleepingcomputer.com/news/security/divd-says-zammad-zero-days-enabled-ai-driven-network-breach/","internal":false,"reflection":false,"title":"DIVD says Zammad zero-days enabled AI-driven network breach","clicks":6}],"read":true,"user_title":null,"bookmarked":false,"actions_summary":[],"moderator":false,"admin":false,"staff":false,"user_id":6580,"hidden":false,"trust_level":2,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/1","reactions":[],"current_user_reaction":null,"reaction_users_count":0,"current_user_used_main_reaction":false,"can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null,"can_vote":false},{"id":64941,"name":"Julia Denise","username":"JuliaDenise","avatar_template":"/user_avatar/community.zammad.org/juliadenise/{size}/11145_2.png","created_at":"2026-10-01T12:16:59.170Z","cooked":"\u003cp\u003e\u003cstrong\u003eZammad statement on vulnerability reports in DIVD case DIVD-2026-00015\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eZammad is aware of public reports about two vulnerabilities in Zammad. The reports are published in case DIVD-2026-00015 by the Dutch Institute for Vulnerability Disclosure (DIVD). The case has also been covered by media and third-party security sites. This statement gives our view on both reports.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-102489 – current Zammad versions are not affected\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eWe first received a report about this issue in August 2026 and analysed it then. Exploitation is only possible on Zammad 6.5 and older, because of the runtime environment those versions use. These versions reached end of support some time ago. Under our security policy, we provide security fixes only for the current stable release.\u003c/p\u003e\n\u003cp\u003eZammad 7.0 and later are not affected. DIVD’s own case page also says that the issue cannot be exploited in practice on these versions. We have still hardened the affected code. The change is included in Zammad 7.2.0.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eCVE-2026-102490 – no details received\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThe DIVD case page lists a second vulnerability, a local privilege escalation, and claims that it affects nearly every Zammad version ever released. Third-party sites describe it as being actively exploited. Up to today, DIVD has not given us any technical details about this vulnerability. We cannot verify a claim we have not been shown. This means we cannot confirm the vulnerability, its scope or the affected versions at this time.\u003c/p\u003e\n\u003cp\u003eWe have formally asked DIVD to send us all available information. As soon as we receive it, we will work on it with the highest priority and publish verified results.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eOur view on how this case was disclosed\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eCoordinated disclosure gives a vendor the details and a reasonable amount of time to fix an issue before it becomes public. That protects users. DIVD’s own timeline shows a report to us on 24 September 2026, followed by public scanning and disclosure on 26 September 2026. A CVE identifier was published for a vulnerability we had not been told about, and its exploitation is now being discussed in public. This leaves Zammad administrators worried, and it leaves them without the information they need to act. We do not consider this a responsible way to handle vulnerabilities.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eWhat we recommend to administrators\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate to Zammad 7.2.0, the current stable release.\u003c/li\u003e\n\u003cli\u003eIf you still run Zammad 6.5 or older, update now. These versions no longer receive security fixes.\u003c/li\u003e\n\u003cli\u003eFollow our security advisories at \u003ca href=\"https://github.com/zammad/zammad/security/advisories\" class=\"inline-onebox\"\u003eSecurity Advisories · zammad/zammad · GitHub\u003c/a\u003e for updates on CVE-2026-102490.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eContact for security researchers\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eSecurity researchers can report vulnerabilities at any time to \u003ca href=\"mailto:security@zammad.com\"\u003esecurity@zammad.com\u003c/a\u003e. Our public PGP key is available for encrypted messages. We are always willing to work with researchers who follow coordinated disclosure.\u003c/p\u003e","post_number":2,"post_type":1,"posts_count":3,"updated_at":"2026-10-01T12:16:59.170Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":268,"reads":36,"readers_count":35,"score":219.4,"yours":false,"topic_id":21297,"topic_slug":"take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited","display_username":"Julia Denise","primary_group_name":"Zammad_core_team","flair_name":"Zammad_core_team","flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":41,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"https://github.com/zammad/zammad/security/advisories","internal":false,"reflection":false,"title":"Security Advisories · zammad/zammad · GitHub","clicks":4}],"read":true,"user_title":"Member of the Core Team","title_is_group":true,"bookmarked":false,"actions_summary":[{"id":2,"count":7}],"moderator":false,"admin":false,"staff":false,"user_id":4656,"hidden":false,"trust_level":4,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2","reactions":[{"id":"heart","type":"emoji","count":7}],"current_user_reaction":null,"reaction_users_count":7,"current_user_used_main_reaction":false,"can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null},{"id":64943,"name":"Florian Liebe","username":"fliebe92","avatar_template":"/user_avatar/community.zammad.org/fliebe92/{size}/12102_2.png","created_at":"2026-10-01T19:48:04.656Z","cooked":"\u003cp\u003eHi everyone,\u003c/p\u003e\n\u003cp\u003eWe have now received the details of CVE-2026-102490 from DIVD, and we are working on it.\u003c/p\u003e\n\u003cp\u003eThis issue cannot be exploited remotely on its own. An attacker would already need access to your server.\u003c/p\u003e\n\u003cp\u003ePlease update to Zammad 7.2.0 and watch \u003ca href=\"https://github.com/zammad/zammad/security/advisories\" class=\"inline-onebox\"\u003eSecurity Advisories · zammad/zammad · GitHub\u003c/a\u003e for updates.\u003c/p\u003e","post_number":3,"post_type":1,"posts_count":3,"updated_at":"2026-10-01T19:48:04.656Z","reply_count":0,"reply_to_post_number":null,"quote_count":0,"incoming_link_count":14,"reads":33,"readers_count":32,"score":193.8,"yours":false,"topic_id":21297,"topic_slug":"take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited","display_username":"Florian Liebe","primary_group_name":"Zammad_core_team","flair_name":"Zammad_core_team","flair_url":null,"flair_bg_color":null,"flair_color":null,"flair_group_id":41,"badges_granted":[],"version":1,"can_edit":false,"can_delete":false,"can_recover":false,"can_see_hidden_post":false,"can_wiki":false,"link_counts":[{"url":"https://github.com/zammad/zammad/security/advisories","internal":false,"reflection":false,"title":"Security Advisories · zammad/zammad · GitHub","clicks":10}],"read":true,"user_title":"Member of the Core Team","title_is_group":true,"bookmarked":false,"actions_summary":[{"id":2,"count":10}],"moderator":true,"admin":false,"staff":true,"user_id":4460,"hidden":false,"trust_level":4,"deleted_at":null,"user_deleted":false,"edit_reason":null,"can_view_edit_history":true,"wiki":false,"post_url":"/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/3","reactions":[{"id":"heart","type":"emoji","count":10}],"current_user_reaction":null,"reaction_users_count":10,"current_user_used_main_reaction":false,"can_accept_answer":false,"can_unaccept_answer":false,"accepted_answer":false,"topic_accepted_answer":null}],"stream":[64925,64941,64943]},"timeline_lookup":[[1,4]],"suggested_topics":[{"fancy_title":"Has anyone ever changed the precision of the time_unit field in public.tickets?","id":18942,"title":"Has anyone ever changed the precision of the time_unit field in public.tickets?","slug":"has-anyone-ever-changed-the-precision-of-the-time-unit-field-in-public-tickets","posts_count":8,"reply_count":3,"highest_post_number":8,"image_url":null,"created_at":"2025-10-16T23:00:04.481Z","last_posted_at":"2025-11-10T21:38:53.749Z","bumped":true,"bumped_at":"2025-11-10T21:38:53.749Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"like_count":3,"views":91,"category_id":9,"featured_link":null,"op_like_count":0,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user":{"id":7272,"username":"LucasLauck","name":"Lucas","avatar_template":"/letter_avatar_proxy/v4/letter/l/839c29/{size}.png","trust_level":1}},{"extras":null,"description":"Recent Poster","user":{"id":3546,"username":"YetAnotherGerrit","name":"Gerrit","avatar_template":"/user_avatar/community.zammad.org/yetanothergerrit/{size}/8413_2.png","moderator":true,"trust_level":4}},{"extras":"latest","description":"Most Recent Poster","user":{"id":88,"username":"MrGeneration","name":"Marcel","avatar_template":"/user_avatar/community.zammad.org/mrgeneration/{size}/9260_2.png","flair_name":"former_core_member","flair_group_id":43,"primary_group_name":"former_core_member","admin":true,"moderator":true,"trust_level":2}}]},{"fancy_title":"Importing Old Email Conversations","id":20611,"title":"Importing Old Email Conversations","slug":"importing-old-email-conversations","posts_count":4,"reply_count":2,"highest_post_number":4,"image_url":null,"created_at":"2026-07-02T21:14:05.612Z","last_posted_at":"2026-07-04T21:12:12.199Z","bumped":true,"bumped_at":"2026-07-04T21:12:12.199Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"like_count":0,"views":48,"category_id":9,"featured_link":null,"op_like_count":0,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user":{"id":7958,"username":"Folr","name":"Folr","avatar_template":"/letter_avatar_proxy/v4/letter/f/a6a055/{size}.png","trust_level":0}},{"extras":null,"description":"Recent Poster","user":{"id":88,"username":"MrGeneration","name":"Marcel","avatar_template":"/user_avatar/community.zammad.org/mrgeneration/{size}/9260_2.png","flair_name":"former_core_member","flair_group_id":43,"primary_group_name":"former_core_member","admin":true,"moderator":true,"trust_level":2}}]},{"fancy_title":"Email notification using OAuth, provided as a package","id":20061,"title":"Email notification using OAuth, provided as a package","slug":"email-notification-using-oauth-provided-as-a-package","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2026-04-17T20:25:48.624Z","last_posted_at":"2026-04-17T20:30:03.228Z","bumped":true,"bumped_at":"2026-04-17T20:30:03.228Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"like_count":1,"views":43,"category_id":9,"featured_link":null,"op_like_count":0,"has_accepted_answer":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user":{"id":7689,"username":"gizl0w","name":"gizl0w","avatar_template":"/letter_avatar_proxy/v4/letter/g/f07891/{size}.png","trust_level":1}},{"extras":null,"description":"Recent Poster","user":{"id":88,"username":"MrGeneration","name":"Marcel","avatar_template":"/user_avatar/community.zammad.org/mrgeneration/{size}/9260_2.png","flair_name":"former_core_member","flair_group_id":43,"primary_group_name":"former_core_member","admin":true,"moderator":true,"trust_level":2}}]},{"fancy_title":"Security advisories \u0026amp; CVEs: how do you stay informed in a timely manner?","id":20099,"title":"Security advisories \u0026 CVEs: how do you stay informed in a timely manner?","slug":"security-advisories-cves-how-do-you-stay-informed-in-a-timely-manner","posts_count":6,"reply_count":1,"highest_post_number":6,"image_url":null,"created_at":"2026-04-21T05:32:48.443Z","last_posted_at":"2026-04-28T18:11:42.150Z","bumped":true,"bumped_at":"2026-04-28T18:11:42.150Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"like_count":9,"views":268,"category_id":9,"featured_link":null,"op_like_count":1,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user":{"id":5328,"username":"skip","name":"Antonio Nardella","avatar_template":"/user_avatar/community.zammad.org/skip/{size}/8559_2.png","trust_level":2}},{"extras":null,"description":"Frequent Poster","user":{"id":4656,"username":"JuliaDenise","name":"Julia Denise","avatar_template":"/user_avatar/community.zammad.org/juliadenise/{size}/11145_2.png","flair_name":"Zammad_core_team","flair_group_id":41,"primary_group_name":"Zammad_core_team","trust_level":4}},{"extras":null,"description":"Recent Poster","user":{"id":3405,"username":"mgruner","name":"Martin Gruner","avatar_template":"/user_avatar/community.zammad.org/mgruner/{size}/5334_2.png","moderator":true,"trust_level":4}},{"extras":"latest","description":"Most Recent Poster","user":{"id":5725,"username":"trishalynn","name":"Trisha","avatar_template":"/user_avatar/community.zammad.org/trishalynn/{size}/9310_2.png","trust_level":2}}]},{"fancy_title":"pt-BR translation completed for Zammad UI — a few items need reviewer input","id":20631,"title":"pt-BR translation completed for Zammad UI — a few items need reviewer input","slug":"pt-br-translation-completed-for-zammad-ui-a-few-items-need-reviewer-input","posts_count":10,"reply_count":7,"highest_post_number":10,"image_url":null,"created_at":"2026-07-07T13:55:02.357Z","last_posted_at":"2026-07-23T06:07:22.844Z","bumped":true,"bumped_at":"2026-07-23T06:07:22.844Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"like_count":5,"views":129,"category_id":9,"featured_link":null,"op_like_count":0,"has_accepted_answer":false,"posters":[{"extras":null,"description":"Original Poster","user":{"id":7965,"username":"igoraraujocosta","name":"Igor Costa","avatar_template":"/user_avatar/community.zammad.org/igoraraujocosta/{size}/12001_2.png","trust_level":1}},{"extras":null,"description":"Recent Poster","user":{"id":88,"username":"MrGeneration","name":"Marcel","avatar_template":"/user_avatar/community.zammad.org/mrgeneration/{size}/9260_2.png","flair_name":"former_core_member","flair_group_id":43,"primary_group_name":"former_core_member","admin":true,"moderator":true,"trust_level":2}},{"extras":"latest","description":"Most Recent Poster","user":{"id":3405,"username":"mgruner","name":"Martin Gruner","avatar_template":"/user_avatar/community.zammad.org/mgruner/{size}/5334_2.png","moderator":true,"trust_level":4}}]}],"tags":[{"id":34,"name":"security","slug":"security"}],"tags_descriptions":{},"fancy_title":"Take care: Local Privilege Escalation (CVE-2026-102490) is reported as being actively exploited","id":21297,"title":"Take care: Local Privilege Escalation (CVE-2026-102490) is reported as being actively exploited","posts_count":3,"created_at":"2026-10-01T06:36:43.613Z","views":77,"reply_count":0,"like_count":17,"last_posted_at":"2026-10-01T19:48:04.656Z","visible":true,"closed":false,"archived":false,"has_summary":false,"archetype":"regular","slug":"take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited","category_id":9,"word_count":580,"deleted_at":null,"user_id":6580,"featured_link":null,"pinned_globally":false,"pinned_at":null,"pinned_until":null,"image_url":null,"slow_mode_seconds":0,"draft":null,"draft_key":"topic_21297","draft_sequence":null,"unpinned":null,"pinned":false,"current_post_number":1,"highest_post_number":3,"deleted_by":null,"actions_summary":[{"id":4,"count":0,"hidden":false,"can_act":false},{"id":8,"count":0,"hidden":false,"can_act":false},{"id":10,"count":0,"hidden":false,"can_act":false},{"id":7,"count":0,"hidden":false,"can_act":false}],"chunk_size":20,"bookmarked":false,"topic_timer":{"id":9488,"execute_at":"2027-09-26T19:48:04.656Z","duration_minutes":518400,"based_on_last_post":true,"status_type":"close","category_id":null},"message_bus_last_id":80,"participant_count":3,"show_read_indicator":false,"thumbnails":null,"slow_mode_enabled_until":null,"valid_reactions":["heart","+1","laughing","open_mouth","clap","confetti_ball","hugs"],"has_accepted_answer":false,"can_create_shared_issue":false,"shared_issue_visible":false,"can_vote":false,"vote_count":0,"user_voted":false,"discourse_zendesk_plugin_zendesk_id":null,"discourse_zendesk_plugin_zendesk_url":"https://your-url.zendesk.com/agent/tickets/","details":{"can_edit":false,"notification_level":1,"participants":[{"id":4460,"username":"fliebe92","name":"Florian Liebe","avatar_template":"/user_avatar/community.zammad.org/fliebe92/{size}/12102_2.png","post_count":1,"primary_group_name":"Zammad_core_team","flair_name":"Zammad_core_team","flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":41,"moderator":true,"trust_level":4},{"id":4656,"username":"JuliaDenise","name":"Julia Denise","avatar_template":"/user_avatar/community.zammad.org/juliadenise/{size}/11145_2.png","post_count":1,"primary_group_name":"Zammad_core_team","flair_name":"Zammad_core_team","flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":41,"trust_level":4},{"id":6580,"username":"DD4PK","name":"DD","avatar_template":"/letter_avatar_proxy/v4/letter/d/a9adbd/{size}.png","post_count":1,"primary_group_name":null,"flair_name":null,"flair_url":null,"flair_color":null,"flair_bg_color":null,"flair_group_id":null,"trust_level":2}],"created_by":{"id":6580,"username":"DD4PK","name":"DD","avatar_template":"/letter_avatar_proxy/v4/letter/d/a9adbd/{size}.png"},"last_poster":{"id":4460,"username":"fliebe92","name":"Florian Liebe","avatar_template":"/user_avatar/community.zammad.org/fliebe92/{size}/12102_2.png"},"links":[{"url":"https://github.com/zammad/zammad/security/advisories","title":"Security Advisories · zammad/zammad · GitHub","internal":false,"attachment":false,"reflection":false,"clicks":14,"user_id":4460,"domain":"github.com","root_domain":"github.com"},{"url":"https://previdian.com/CVE-2026-102490","title":"CVE-2026-102490 Exploited in the Wild — Zammad | Previdian","internal":false,"attachment":false,"reflection":false,"clicks":8,"user_id":6580,"domain":"previdian.com","root_domain":"previdian.com"},{"url":"https://csirt.divd.nl/cases/DIVD-2026-00015/","title":"DIVD-2026-00015 - Vulnerabilities in Zammad during investigation of case DIVD-2026-00014 | DIVD CSIRT","internal":false,"attachment":false,"reflection":false,"clicks":6,"user_id":6580,"domain":"csirt.divd.nl","root_domain":"divd.nl"},{"url":"https://www.bleepingcomputer.com/news/security/divd-says-zammad-zero-days-enabled-ai-driven-network-breach/","title":"DIVD says Zammad zero-days enabled AI-driven network breach","internal":false,"attachment":false,"reflection":false,"clicks":6,"user_id":6580,"domain":"www.bleepingcomputer.com","root_domain":"bleepingcomputer.com"}]},"bookmarks":[]}