Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Zammad — Vulnerabilities & Security Advisories 48

All 48 CVE vulnerabilities found in Zammad, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting the Zammad open-source help desk software developed by the Zammad GmbH vendor. The collection encompasses a wide spectrum of vulnerability classes including cross-site scripting, privilege escalation, and information disclosure issues discovered in the product since its initial public release through the most recent stable versions. Readers can utilize this resource to track official security advisories published by the Zammad team, analyze the prevalence and impact of specific weakness categories within customer support platforms, or review the complete historical record of security flaws associated with this particular application. The data presented here serves as a centralized reference for security professionals, system administrators, and developers seeking to assess the risk profile of their Zammad deployments without navigating fragmented sources. By consolidating these findings, the page facilitates efficient vulnerability management and supports informed decision-making regarding patching priorities and configuration hardening. No specific CVE identifiers are listed in this summary, but the underlying dataset provides direct links to detailed technical reports for each entry. This compilation remains neutral and factual, focusing strictly on the existence, nature, and remediation status of reported defects rather than promotional content or vendor commentary.

Vendor: Zammad GmbH

CVE ID Title CVSS Severity Published
CVE-2026-102490 Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package 9.4 Critical 2026-09-30
CVE-2026-102489 Undisclosed RCE in Zammad v6.3 and higher 9.4 Critical 2026-09-30
CVE-2026-63208 Zammad: Microsoft Graph error logs expose partially masked OAuth access tokens CWE-116 5.1 Medium 2026-09-25
CVE-2026-63006 Zammad: HTML sanitizer API path allowlist bypass via interior path traversal in img src/srcset CWE-22 5.3 Medium 2026-09-25
CVE-2026-63204 Zammad: Authenticated agents can read AI summary error messages from inaccessible tickets CWE-639 2.3 Low 2026-09-25
CVE-2026-61855 Zammad: Invalid PGP Detached Signatures Reported as Good Signature on Inbound Mail CWE-347 5.3 Medium 2026-09-25
CVE-2026-84461 Zammad: Missing rate limiting allows password brute-forcing during two-factor login CWE-203 6.9 Medium 2026-09-25
CVE-2026-63207 Zammad: Sensitive Information Exposure in Integration Administration API CWE-200 6.9 Medium 2026-09-25
CVE-2026-84465 Zammad: S/MIME signature verification allows forged sender impersonation CWE-290 7.1 High 2026-09-25
CVE-2026-84463 Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attribute CWE-79 6.3 Medium 2026-09-25
CVE-2026-84464 Zammad: IDOR in External Data Source rendering exposes ticket, user, group, and organization data CWE-200 7.1 High 2026-09-25
CVE-2026-63216 Zammad: Stored XSS via unescaped option labels in the object attribute options context UI CWE-80 5.3 Medium 2026-09-25
CVE-2026-84458 Zammad: Account takeover via unverified email matching during SSO auto-link CWE-287 9.1 Critical 2026-09-25
CVE-2026-84460 Zammad: Missing Authorization in TagsController#list Allows Cross-Object Tag Enumeration CWE-639 5.3 Medium 2026-09-25
CVE-2026-63206 Zammad: Remote image tracking bypass via shortened URL scheme CWE-20 5.3 Medium 2026-09-25
CVE-2026-63205 Zammad: Channel admins can read unauthorized attachments via signature rich-text body CWE-639 5.1 Medium 2026-09-25
CVE-2026-84462 Zammad: AI Agent template sanitizer bypass leads to remote code execution CWE-20 8.6 High 2026-09-25
CVE-2026-65828 Zammad: Pending upload deletion bypass via legacy attachment endpoint CWE-862 2.3 Low 2026-09-25
CVE-2026-61525 Zammad: Arbitrary File Deletion via Unvalidated Session Identifier in Long Polling Controller CWE-22 8.8 High 2026-09-25
CVE-2026-56728 Zammad: Cross-User Taskbar Item Access Control Vulnerability CWE-200 5.3 Medium 2026-09-25
CVE-2026-56725 Zammad: Denial of Service via OTRS Import Controller CWE-306 8.7 High 2026-09-25
CVE-2026-56732 Zammad: Malicious input in Ticket Body Enables Session Termination CWE-20 5.3 Medium 2026-09-25
CVE-2026-56730 Zammad: Missing authorization in GraphQL mutation for suggesting knowledge base answers CWE-862 2.1 Low 2026-09-25
CVE-2026-56733 Zammad: Incorrect Authorization and Improper Privilege Management CWE-269 8.7 High 2026-09-25
CVE-2026-56731 Zammad: Cross-Site Scripting in Ticket Notifications CWE-79 8.4 High 2026-09-25
CVE-2026-56735 Zammad: Improper neutralization of `srcset` attribute in IMG tags in Zammad CWE-82 5.3 Medium 2026-09-25
CVE-2026-56727 Zammad: PGP signature spoofing via unvalidated verification return CWE-287 7.1 High 2026-09-25
CVE-2026-56734 Zammad: Avatar Image URL Server-Side Request Forwarding CWE-918 5.3 Medium 2026-09-25
CVE-2026-56726 Zammad: Missing authorization check in GitHub + GitLab integration allows cross-ticket data leak CWE-862 5.1 Medium 2026-09-25
CVE-2026-56729 Zammad: Titles of knowledge base answers will be shown across all categories via the global search CWE-200 2.1 Low 2026-09-25

All 48 known CVE vulnerabilities affecting Zammad with full Chinese analysis, references, and POCs where available.