Zammad Gmbh Zammad
3 CVEs affecting Zammad Gmbh Zammad. Latest disclosed: 2026-09-30. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-1010018 | Medium | 6.1 | 2019-07-16 | Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The compone… |
CVE-2026-102490 | | 2026-09-30 | All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root. | |
CVE-2026-102489 | | 2026-09-30 | Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also… |