CVE-2026-84460

The open-source helpdesk system Zammad is vulnerable to an authorization bypass in the TagsController#list component prior to version 7.1.2 . Any authenticated user can access a REST endpoint to retrieve tag names for specific tickets, even if they lack permission to view those tickets. Because t...