Zammad GmbH has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.6 (high).
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.6
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Products
- Zammad 2
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
Zammad GmbH vulnerabilities
CVEs affecting Zammad GmbH, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-102490High· 8.5All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
▾ TwilightZammad GmbH · Zammadvia NVD
CVE-2026-102489High· 8.7Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3, but not exploitable due to environm…
▾ TwilightZammad GmbH · Zammadvia NVD