CVE-2026-102489— Undisclosed RCE in Zammad v6.3 and higher
Quick assessment
Affected
Zammad GmbH Zammad
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Zammad 6.3.0 至 6.5.4 版本存在一个会话劫持漏洞，该漏洞可导致以 zammad 用户身份执行远程代码。该漏洞同样存在于 7.0.0 至 7.1.3 版本中，但由于环境条件限制，无法被实际利用。
Affected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Zammad GmbH | Zammad | *< 6.3.0 |
unknown |
6.3.0< 6.5.4 |
affected | ||
7.0.0< * |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-102489
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Undisclosed RCE in Zammad v6.3 and higher
Source: CVE Program / CVE List V5
Vulnerability Description
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3, but not exploitable due to environment conditions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/V:C
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Zammad GmbH | Zammad | 6.3.0 ~ 6.5.4 | - |
|
II. Public POCs for CVE-2026-102489
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-102489
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-102489 (2)
-
-
🔗 Undisclosed RCE in Zammad v6.3 and higher | DIVD CSIRT third-party-advisory
IV. Related Vulnerabilities
Same product: Zammad
-
CVE-2026-102490
Undisclosed LPE in Zammad v1.5.0 to v7.1.0-alpha -
CVE-2026-63208
Zammad: Microsoft Graph error logs expose partially masked O -
CVE-2026-63006
Zammad: HTML sanitizer API path allowlist bypass via interio -
CVE-2026-63204
Zammad: Authenticated agents can read AI summary error messa -
CVE-2026-61855
Zammad: Invalid PGP Detached Signatures Reported as Good Sig
V. Comments for CVE-2026-102489
No comments yet