CVE-2026-34782

creationtimestamp| type| source ---|---|--- 2026-04-08 21:31:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizakbphxh27...

CVE-2026-34782

Zammad (web-based helpdesk) has an access-control flaw in the REST endpoint POST /api/v1/ai_assistance/text_tools/:id, allowing use of the text tool without proper privileges prior to versions 7.0.1 and 6.5.4. The issue enables exploitation in network contexts with low privileges and no user inte...