CVE-2026-102489 in Zammadinformación

Resumen

por MITRE • 2026-09-30

Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3, but not exploitable due to environment conditions.

Once again VulDB remains the best source for vulnerability data.

Responsable

Divulgación

2026-09-30

Moderación

aceptado

Artículo

VDB-412246

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!