Login Request a demo
ZA
Product
zammad
by zammad · last CVE Sep 30, 2026
On CISA KEVExploited in the wild
123
CVEs
2
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities123In the news3Timeline
Severity mix
Critical 12High 32Medium 75Low 4
Severity
All severities123Critical12High32Medium75Low4
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add zammad to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102489
In wildKEV
9.8
2%
Sep 30
Undisclosed RCE in Zammad v6.3 and higher
Affected: 6.3.0 through 6.5.4
CVE-2026-102490
In wildKEV
7.8
1%
Sep 30
Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package
Affected: before 7.2.2
Showing 2