Vulnerabilities in Zammad GmbH

3 results

CVE-2026-102489HIGHUndisclosed RCE in Zammad v6.3 and higherEPSS 22.5%KEV CVE-2026-102490HIGHLocal privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM packageEPSS 10.9%KEV CVE-2019-1010018—Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users bEPSS 1.3%