Zammad session fixation flaw CVE-2026-102489 exploited, CISA KEV
CISA says the Zammad flaw CVE-2026-102489 is exploited and can give code execution. Check your version, apply vendor fixes and review sessions by 5 October.
-
-
Zammad root privilege escalation flaw added to CISA KEV (CVE-2026-102490)
CISA says CVE-2026-102490 in Zammad, which lets the local zammad user become root, is exploited. Remediation is due 5 October 2026.
End of content
End of content