---
id: CVE-2026-56729
title: Zammad is a web based open source helpdesk/customer support system
summary: >-
  Zammad is a web based open source helpdesk/customer support system. Prior to
  7.0.2, when multiple KB categories have different editor roles assigned, a
  user with knowledge_base.editor in one category can see answer titles and
  updated_at …
severity: low
cvss: 2.1
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'
cwe:
  - CWE-200
  - CWE-280
  - CWE-284
vendor: zammad
product: zammad
affected:
  - zammad < 7.0.2
published: '2026-09-25'
updated: '2026-09-25'
sourceUpdated: '2026-09-25T18:17:26.943'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-56729'
references:
  - url: >-
      https://github.com/zammad/zammad/commit/5076aa1e3081146f826ffaef686c89935fdb4393
    label: security-advisories@github.com
  - url: >-
      https://github.com/zammad/zammad/commit/7b6c0adec006e036c9e605c4141a091a6e08aadf
    label: security-advisories@github.com
  - url: >-
      https://github.com/zammad/zammad/commit/de5dc4195829e0e1a64307d60c9e06e0e781ab37
    label: security-advisories@github.com
  - url: 'https://github.com/zammad/zammad/security/advisories/GHSA-4m54-p3mr-22g2'
    label: security-advisories@github.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-25T17:08:08.905916Z'
cvssSource: cna
ingestedAt: '2026-09-25T17:13:14.012Z'
---

## Overview

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, when multiple KB categories have different editor roles assigned, a user with knowledge_base.editor in one category can see answer titles and updated_at timestamps from categories they do not have editor access to , via the global quick search. Category names are not leaked, and opening the answer returns "Page not found," but the title alone may disclose sensitive information. This vulnerability is fixed in 7.0.2.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.