Vulnerabilities

Filters

2 selected

92 records

Sort

Vendor: Zammad GmbH Component: Zammad Clear all filters

TI-2026-65406 CVE-2026-102490 · GHSA-hgff-g8g3-4xr8

Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package

CRITICAL 100KEV

Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the…

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.10936 Published 2026-09-30 Fixed in 7.2.2 CWE-269

TI-2026-65405 CVE-2026-102489 · GHSA-xmw5-m2wg-4243

Undisclosed RCE in Zammad v6.3 and higher

CRITICAL 100KEV

Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.49915 Published 2026-09-30 Fixed in 6.5.4 CWE-384

TI-2026-27081 CVE-2026-34837

Zammad is miissing authorization in AI assistance controller for context data used in text tools

LOW 23

Zammad is a web based open source helpdesk/customer support system.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00183 Published 2026-04-08 Fixed in 7.0.1 CWE-862

TI-2026-27026 CVE-2026-34782

Zammad has improper access control in AI assistance controller for text tools

LOW 29

Zammad is a web based open source helpdesk/customer support system.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00172 Published 2026-04-08 Fixed in 7.0.1 CWE-862

TI-2026-26968 CVE-2026-34724

Zammad has a server-side template injection leading to RCE via AI Agent

MEDIUM 40

Zammad is a web based open source helpdesk/customer support system.

CVSS 4.0HIGH 8.7 Network High privileges User interaction EPSS 0.00319 Published 2026-04-08 Fixed in 7.0.1 CWE-1336

TI-2026-26967 CVE-2026-34723

Zammad has incorrect access control in getting_started_controller

MEDIUM 44

Zammad is a web based open source helpdesk/customer support system.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00451 Published 2026-04-08 Fixed in 6.5.4, 7.0.1 CWE-284

TI-2026-26966 CVE-2026-34722

Zammad is missing authorization in ticket create endpoint

LOW 36

Zammad is a web based open source helpdesk/customer support system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00174 Published 2026-04-08 Fixed in 6.5.4, 7.0.1 CWE-862

TI-2026-26965 CVE-2026-34721

Zammad has Cross-site request forgery (CSRF) in OAuth callback endpoints

LOW 25

Zammad is a web based open source helpdesk/customer support system.

CVSS 4.0MEDIUM 5.9 Network Low privileges User interaction EPSS 0.00107 Published 2026-04-08 Fixed in 6.5.4, 7.0.1 CWE-352

TI-2026-26964 CVE-2026-34720

Zammad has an origin validation error in SSO mechanism

LOW 11

Zammad is a web based open source helpdesk/customer support system.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00104 Published 2026-04-08 Fixed in 6.5.4, 7.0.1 CWE-346

TI-2026-26963 CVE-2026-34719

Zammad has a Server-side request forgery (SSRF) via webhooks

LOW 36

Zammad is a web based open source helpdesk/customer support system.

CVSS 4.0HIGH 8.3 Network High privileges No interaction EPSS 0.00254 Published 2026-04-08 Fixed in 6.5.4, 7.0.1 CWE-918

TI-2026-26962 CVE-2026-34718

Zammad improperly neutralizes of script-related HTML tags in ticket articles

LOW 23

Zammad is a web based open source helpdesk/customer support system.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00155 Published 2026-04-08 Fixed in 6.5.4, 7.0.1 CWE-80

TI-2026-26543 CVE-2026-34248

Zammad has an information disclosure in ticket detail view of customers in shared organizations

LOW 11

Zammad is a web based open source helpdesk/customer support system.

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.00201 Published 2026-04-08 Fixed in 7.0.1 CWE-284

TI-2025-23442 CVE-2025-32360 · GHSA-cqmw-qrqr-v255

In Zammad 6.4.x before 6.4.2, there is information exposure.

LOW 35

In Zammad 6.4.x before 6.4.2, there is information exposure.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00258 Published 2025-04-05 Fixed in 6.4.2 CWE-402

TI-2025-23441 CVE-2025-32359 · GHSA-g3qr-3fvc-4fm6

In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security.

LOW 38

In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00303 Published 2025-04-05 Fixed in 6.4.2 CWE-602

TI-2025-23440 CVE-2025-32358 · GHSA-h7vp-w2vp-6c97

Server-side request forgery in Zammad

LOW 19

In Zammad 6.4.x before 6.4.2, SSRF can occur.

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00278 Published 2025-04-05 Fixed in 6.4.2 CWE-918

TI-2025-23439 CVE-2025-32357 · GHSA-9879-4r59-96j2

Authentication bypass in Zammad

LOW 20

In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to fetch knowledge base content that they have no permission for.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00268 Published 2025-04-05 Fixed in 6.4.2 CWE-288

TI-2024-36895 CVE-2024-55578 · GHSA-33vc-jm33-3f35

Zammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials…

LOW 20

Zammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and application_secret) in log files.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00296 Published 2024-12-09 No fix listed CWE-532

TI-2024-23928 CVE-2024-36078 · GHSA-999v-p9fh-4w86

In Zammad before 6.3.1, a Ruby gem bundled by Zammad is installed with world-writable…

LOW 31

In Zammad before 6.3.1, a Ruby gem bundled by Zammad is installed with world-writable file permissions.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00202 Published 2024-05-19 No fix listed CWE-94

TI-2024-22252 CVE-2024-33668 · GHSA-mxr8-qj6j-f7gq

An issue was discovered in Zammad before 6.3.0.

HIGH 80

An issue was discovered in Zammad before 6.3.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00448 Published 2024-04-26 No fix listed CWE-639

TI-2024-22251 CVE-2024-33667 · GHSA-fc5p-cp62-fgpc

An issue was discovered in Zammad before 6.3.0.

LOW 30

An issue was discovered in Zammad before 6.3.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0056 Published 2024-04-26 No fix listed CWE-862

TI-2024-22250 CVE-2024-33666 · GHSA-4rv2-fpjm-34hr

An issue was discovered in Zammad before 6.3.0.

LOW 38

An issue was discovered in Zammad before 6.3.0.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00511 Published 2024-04-26 No fix listed CWE-284

TI-2023-27601 CVE-2023-50457 · GHSA-f8r5-p95m-6mj9

An issue was discovered in Zammad before 6.2.0.

LOW 20

An issue was discovered in Zammad before 6.2.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00415 Published 2023-12-10 No fix listed CWE-863

TI-2023-27600 CVE-2023-50456 · GHSA-2jrj-64mg-jhw6

An issue was discovered in Zammad before 6.2.0.

LOW 30

An issue was discovered in Zammad before 6.2.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00441 Published 2023-12-10 No fix listed CWE-601

TI-2023-27599 CVE-2023-50455 · GHSA-278r-xxvf-49rm

An issue was discovered in Zammad before 6.2.0.

MEDIUM 40

An issue was discovered in Zammad before 6.2.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00701 Published 2023-12-10 No fix listed CWE-770

TI-2023-27598 CVE-2023-50454 · GHSA-xxf4-wg2g-58ch

An issue was discovered in Zammad before 6.2.0.

LOW 26

An issue was discovered in Zammad before 6.2.0.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00279 Published 2023-12-10 No fix listed CWE-295