MSRXVendors / Zammad GmbH
Zammad GmbH vulnerabilities being exploited
2 Zammad GmbH flaws were confirmed exploited in the wild in the past 365 days, across 1 product: Zammad. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-10-02 | CVE-2026-102490 Zammad Zammad GmbH Zammad Improper Privilege Management Vulnerability Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489. | 2026-10-05 |
| 2026-10-02 | CVE-2026-102489 Zammad Zammad GmbH Zammad Session Fixation Vulnerability Zammad GmbH Zammad contains a session fixation vulnerability that can lead to remote code execution as the zammad user. This vulnerability can be chained with CVE-2026-102490. | 2026-10-05 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.