Vendor

    Zammad Gmbh

    3 known vulnerabilities in products by Zammad Gmbh, 2 of them actively exploited (CISA KEV).

    Key figures

    3

    Vulnerabilities

    2

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Zammad Gmbh
    CriticalCVE-2026-102489

    Undisclosed RCE in Zammad v6.3 and higher

    In CISA KEValso in 1 other product

    		9.8
    CriticalCVE-2026-102490

    Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package

    In CISA KEValso in 1 other product

    		7.8
    MediumCVE-2019-1010018

    Zammad: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

    also in 1 other product

    		6.1

    News

    Products

    Products by Zammad Gmbh
    Zammad32