ZA
Product
zammad
On CISA KEVExploited in the wild
123
CVEs
2
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 12High 32Medium 75Low 4
Watch
Add zammad to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102490 In wildKEV | 7.8 | Sep 30 | Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package Affected: before 7.2.2 |
| CVE-2026-61525 | 8.8 | Sep 25 | Zammad: Arbitrary File Deletion via Unvalidated Session Identifier in Long Polling Controller Affected: = 7.0.2; = 7.1.0 |
| CVE-2025-32359 | 8.8 | Apr 5 | In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security Affected: 6.4 before 6.4.2 |
| CVE-2021-42086 | 8.8 | Oct 7 | An issue was discovered in Zammad before 4.1.1 Affected: before 4.1.1 |
| CVE-2017-6081 | 8.8 | Mar 13 | A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1 Affected: through 1.0.3; 1.1.0; 1.1.1; 1.1.2; 1.2.0 |
| CVE-2026-56725 | 8.7 | Sep 25 | Zammad: Denial of Service via OTRS Import Controller Affected: < 7.0.2 |
| CVE-2026-56733 | 8.7 | Sep 25 | Zammad: Incorrect Authorization and Improper Privilege Management Affected: < 7.0.2 |
| CVE-2026-84462 | 8.6 | Sep 25 | Zammad: AI Agent template sanitizer bypass leads to remote code execution Affected: < 7.1.2 |
| CVE-2024-33666 | 8.6 | Apr 26 | An issue was discovered in Zammad before 6.3.0 Affected: 6.2.0 before 6.3.0; 6.3.0 |
| CVE-2026-56731 | 8.4 | Sep 25 | Zammad: Cross-Site Scripting in Ticket Notifications Affected: < 7.0.1 |
| CVE-2025-32360 | 8.1 | Apr 5 | In Zammad 6.4.x before 6.4.2, there is information exposure Affected: 6.4 before 6.4.2 |
| CVE-2021-43145 | 8.1 | Feb 4 | With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts Affected: 5.0.1 |
| CVE-2026-34723 | 7.5 | Apr 8 | Zammad has incorrect access control in getting_started_controller Affected: < 6.5.4; >= 7.0.0-alpha, < 7.0.1 |
| CVE-2023-50455 | 7.5 | Dec 10 | An issue was discovered in Zammad before 6.2.0 Affected: 6.1.0; 6.1.0; 6.2.0 |
| CVE-2022-35488 | 7.5 | Aug 8 | In Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of Zammad, and thereby send many requests for a known account to cause Denial Of… Affected: 5.2.0; 5.2.0 |
| CVE-2022-35487 | 7.5 | Aug 8 | Zammad 5.2.0 suffers from Incorrect Access Control Affected: 5.2.0; 5.2.0 |
| CVE-2022-29701 | 7.5 | Apr 27 | A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a… Affected: 5.1.0 |
| CVE-2022-29700 | 7.5 | Apr 27 | A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cause a Denial of Service (DoS) during password verification Affected: 5.1.0 |
| CVE-2021-42089 | 7.5 | Oct 7 | An issue was discovered in Zammad before 4.1.1 Affected: before 4.1.1 |
| CVE-2021-35299 | 7.5 | Jun 28 | Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration probing Affected: 1.0.0 through 4.0.0 |
| CVE-2020-29160 | 7.5 | Dec 28 | An issue was discovered in Zammad before 3.5.1 Affected: before 3.5.1 |
| CVE-2020-26032 | 7.5 | Dec 28 | An SSRF issue was discovered in Zammad before 3.4.1 Affected: 1.0.0 before 3.4.1 |
| CVE-2020-10101 | 7.5 | Mar 5 | An issue was discovered in Zammad 3.0 through 3.2 Affected: 1.0.0 through 3.2.0 |
| CVE-2020-10096 | 7.5 | Mar 5 | An issue was discovered in Zammad 3.0 through 3.2 Affected: 1.0.0 through 3.2.0 |
| CVE-2026-34724 | 7.2 | Apr 8 | Zammad has a server-side template injection leading to RCE via AI Agent Affected: >= 7.0.0, < 7.0.1 |
| CVE-2021-42093 | 7.2 | Oct 7 | An issue was discovered in Zammad before 4.1.1 Affected: before 4.1.1 |
| CVE-2026-84465 | 7.1 | Sep 25 | Zammad: S/MIME signature verification allows forged sender impersonation Affected: < 7.1.2 |
| CVE-2026-84464 | 7.1 | Sep 25 | Zammad: IDOR in External Data Source rendering exposes ticket, user, group, and organization data Affected: < 7.1.2 |
| CVE-2026-56727 | 7.1 | Sep 25 | Zammad: PGP signature spoofing via unvalidated verification return Affected: < 7.0.2 |
| CVE-2026-56723 | 7.1 | Sep 25 | Zammad: Missing authorization on ticket attachment download Affected: < 7.0.2 |
| CVE-2026-56724 | 7.1 | Sep 25 | Zammad: Incorrect implementation of permission checks in the knowledge base module Affected: < 7.0.2 |
| CVE-2026-13229 | 7.1 | Aug 4 | Zammad 7.0.1 - Improper authorization in ticket article attachment cloning Affected: through 7.0.1 |
Showing 32