Get an email when a new major security incident drops. No spam, unsubscribe any time.
Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.
// day
1 new incident, 0 with updates.
› Zammad GmbH Zammad
Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489. CISA added CVE-2026-102490, CVE-2026-102489 to the Known Exploited Vulnerabilities catalog on 2026-10-02 based on evidence of active exploitation.