CVE-2026-63208

The open source helpdesk system Zammad is vulnerable to sensitive information disclosure in versions prior to 7.1.2 . When a Microsoft Graph request fails, the system logs the authentication token with incomplete masking. Specifically, for JWT formats, only the first part is hidden, leaving the r...