// tag
Zammad
Security incidents tagged Zammad. Newest first.
- incidents
- 1
- live
- 1
- patched
- 1
## 1 Zammad incident in the last year
through Oct 22, 2026crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
highZammad GmbH Zammad: Zammad GmbH Zammad Improper Privilege Management Vulnerabilitypatched
› Zammad GmbH Zammad patched
Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489. CISA added CVE-2026-102490, CVE-2026-102489 to the Known Exploited Vulnerabilities catalog on 2026-10-02 based on evidence of active exploitation.
open incident →CVE-2026-102490 · CVE-2026-102489
