Auth bypass in Zammad
CVE-2026-34722
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the used endpoint for ticket creation was missing authorization if the related parameter for adding links is used. This vulnerability is fixed in 7.0.1 and 6.5.4.
Vulnerability class: Broken Access Control
EPSS: 0.002 (6.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Zammad — versions < 6.5.4, 7.0.0, >= 7.0.0-alpha, < 7.0.1
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-34722?
- CVE-2026-34722 is a medium-severity vulnerability in Zammad, classified under Missing Authorization. CVSS score: 4.3/10. Published 2026-04-08.
- How severe is CVE-2026-34722?
- Medium severity. CVSS v3 base score is 4.3 out of 10.