ZA
Product
zammad
On CISA KEVExploited in the wild
123
CVEs
2
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 12High 32Medium 75Low 4
Watch
Add zammad to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-63204 | 2.3 | Sep 25 | Zammad: Authenticated agents can read AI summary error messages from inaccessible tickets Affected: < 7.1.2 |
| CVE-2026-65828 | 2.3 | Sep 25 | Zammad: Pending upload deletion bypass via legacy attachment endpoint Affected: < 7.1.2 |
| CVE-2026-56730 | 2.1 | Sep 25 | Zammad: Missing authorization in GraphQL mutation for suggesting knowledge base answers Affected: < 7.0.2 |
| CVE-2026-56729 | 2.1 | Sep 25 | Zammad: Titles of knowledge base answers will be shown across all categories via the global search Affected: < 7.0.2 |
Showing 4