Product by Zammad Gmbh
Zammad
3 known vulnerabilities in Zammad (Zammad Gmbh), 2 of them actively exploited (CISA KEV).
Key figures
3
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-102489 | Undisclosed RCE in Zammad v6.3 and higher In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2026-102490 | Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package In CISA KEValso in 1 other product | 7.8 | |
| Medium | CVE-2019-1010018 | Zammad: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 6.1 |