https://pwn.watch/t/zammad Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Fri, 02 Oct 2026 00:00:00 GMT https://pwn.watch/i/zammad-gmbh-zammad-cve-2026-102490 https://pwn.watch/i/zammad-gmbh-zammad-cve-2026-102490 Fri, 02 Oct 2026 00:00:00 GMT high <p>Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489. CISA added CVE-2026-102490, CVE-2026-102489 to the Known Exploited Vulnerabilities catalog on 2026-10-02 based on evidence of active exploitation.</p> <p><strong>Status:</strong> live · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2026-10-02: CISA added CVE-2026-102490, CVE-2026-102489 to the KEV catalog (due 2026-10-05).</li></ul> <p><strong>CVEs:</strong> CVE-2026-102490, CVE-2026-102489</p>