7 matches found
CVE-2026-56725
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request to POST /api/v1/import/otrs/importcheck blocks a Zammad request worker for roughly two minutes. The importcheck and importstatus actions are missing the setupdoneresponse guard...
CVE-2026-56725
The open-source helpdesk system Zammad is vulnerable to a Denial of Service (DoS) attack in versions prior to 7.0.2 . The root cause is that the import_check and import_status actions in the OTRS import controller lack a setup_done_response guard, allowing them to execute on fully set-up producti...
CVE-2026-56725 Zammad: Denial of Service via OTRS Import Controller
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request to POST /api/v1/import/otrs/importcheck blocks a Zammad request worker for roughly two minutes. The importcheck and importstatus actions are missing the setupdoneresponse guard...
CVE-2026-56725 Zammad: Denial of Service via OTRS Import Controller
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request to POST /api/v1/import/otrs/importcheck blocks a Zammad request worker for roughly two minutes. The importcheck and importstatus actions are missing the setupdoneresponse guard...
EUVD-2026-87220
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request to POST /api/v1/import/otrs/importcheck blocks a Zammad request worker for roughly two minutes. The importcheck and importstatus actions are missing the setupdoneresponse guard...
CVE-2026-56725: Missing Authentication for Critical Function
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request to POST /api/v1/import/otrs/importcheck blocks a Zammad request worker for roughly two minutes. The importcheck and importstatus actions are missing the setupdoneresponse guard...
PT-2026-98939
Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.2 Description An unauthenticated remote attacker can cause a denial of service on a production instance. This occurs because the import check and import status actions lack the setup done response guard, allowing...