CVE-2026-102489
Sep 30, 2026
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3...
Read Advisory
2 advisories affecting Zammad
2
Total CVEs
2
Critical
0
High
Sep 30, 2026
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3...
Sep 30, 2026
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root....