Security Digest

Zammad GmbH: known exploited vulnerabilities

2 Zammad GmbH CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.

AddedCVEProduct and flawCISA due
2026-10-02CVE-2026-102490Zammad GmbH Zammad
Zammad GmbH Zammad Improper Privilege Management Vulnerability
2026-10-05
2026-10-02CVE-2026-102489Zammad GmbH Zammad
Zammad GmbH Zammad Session Fixation Vulnerability
2026-10-05