Will Zammad zero-day chain be publicly exploited or PoC released by Oct 31, 2026?

DIVD disclosed that a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system enabled a breach of DIVD's own network. This market tracks whether exploitation evidence or proof-of-concept code emerges before end of October.

Resolution Criteria

Public PoC code, CISA KEV addition, or credible researcher documentation showing successful exploitation of the Zammad zero-day chain in the wild.