Vulnerabilities in zammad
46 resultsCVE-2026-63207MEDIUMZammad: Sensitive Information Exposure in Integration Administration APIEPSS 0.2%CVE-2026-34718MEDIUMZammad improperly neutralizes of script-related HTML tags in ticket articlesEPSS 0.2%CVE-2026-84463MEDIUMZammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attributeEPSS 0.1%CVE-2026-84465HIGHZammad: S/MIME signature verification allows forged sender impersonationEPSS 0.1%CVE-2026-34721MEDIUMZammad has Cross-site request forgery (CSRF) in OAuth callback endpointsEPSS 0.1%CVE-2026-34720LOWZammad has an origin validation error in SSO mechanismEPSS 0.1%