Login Request a demo
ZA
Product
Zammad
by Zammad GmbH · last CVE Sep 30, 2026
On CISA KEVExploited in the wild
2
CVEs
2
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities2In the news3Timeline
Severity mix
Critical 1High 1Medium 0Low 0
Severity
All severities2Critical1High1Medium0Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Zammad to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102489
In wildKEV
9.8
2%
Sep 30
Undisclosed RCE in Zammad v6.3 and higher
Affected: 6.3.0 before 6.5.4
CVE-2026-102490
In wildKEV
7.8
1%
Sep 30
Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package
Affected: 1.5.0 before 7.2.2
Showing 2