1100 matches found
Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days
Dutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote code execution and root access...
Zammad GmbH Zammad Improper Privilege Management Vulnerability
Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489...
Zammad GmbH Zammad Session Fixation Vulnerability
Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490...
CVE-2026-34724
🚨 CVE-2026-34724 - Zammad 7.0.1 - 通过AI代理的服务器端模板注入（SSTI）导致远程代码执行（RCE） 📌 概述 Zammad 是一个流行的开源基于 Web 的帮助台和客户支持系统。 CVE-2026-34724 是新的 AI Agent 功能中的一个 服务器端模板注入（SSTI） 漏洞。 一个能够修改 typeenrichmentdata 配置的已认证 管理员 可以注入恶意模板，当 AI 代理处理数据时导致 完全远程代码执行（RCE） 。 受影响版本 ：Zammad 7.0.1 修复版本 ：Zammad 7.0.1 （于 2026 年 4 月 8 日发...
Vulnerabilities found in Zammad
Two vulnerabilities associated with zeroday have been identified in Zammad. The first vulnerability has been assigned the identifier CVE-2026-102489. This vulnerability allows unauthorized malicious actors to execute arbitrary code remotely. It is present in Zammad versions 6.3.0 through 6.5.4. T...
CVE-2026-102489
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3, but not exploitable due to environment conditions...
CVE-2026-102490
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root...
EUVD-2026-90081
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root...
CVE-2026-102490 Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root...
CVE-2026-102490 Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root...
CVE-2026-102490
All versions of Zammad , including the latest alpha, are vulnerable to a local privilege escalation (LPE) flaw. This vulnerability allows a local zammad user to escalate their privileges to root on the system where Zammad is running. The issue has been identified as actively exploited in the wild...
CVE-2026-102489 Undisclosed RCE in Zammad v6.3 and higher
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3, but not exploitable due to environment conditions...
EUVD-2026-90080
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3, but not exploitable due to environment conditions...
CVE-2026-102489 Undisclosed RCE in Zammad v6.3 and higher
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3, but not exploitable due to environment conditions...
CVE-2026-102489
Zammad versions 6.3.0 to 6.5.4 are vulnerable to a session hijack vulnerability that allows for remote code execution (RCE) as the zammad user. While the flaw also exists in versions 7.0.0 to 7.1.3 , it is not exploitable in those versions due to specific environment conditions. This vulnerabilit...
CVE-2026-102489
creationtimestamp| type| source ---|---|--- 2026-09-30 11:44:28+00:00| seen| https://www.ncsc.nl/alerts/actief-misbruik-van-zeroday-kwetsbaarheden-in-zammad-update-nu 2026-09-30 15:31:14+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0396 2026-09-30 18:08:25+00:00| seen|...
CVE-2026-102490
creationtimestamp| type| source ---|---|--- 2026-09-30 11:44:28+00:00| seen| https://www.ncsc.nl/alerts/actief-misbruik-van-zeroday-kwetsbaarheden-in-zammad-update-nu 2026-09-30 15:31:14+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0396 2026-09-30 18:08:34+00:00| seen|...
VulnCheck KEV: CVE-2026-102490
Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489...
