Firetruck

CVE-2026-102490

KEV
Updated Oct 8, 2026 · PUBLISHED
View KEV entry →

Description

Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
ZammadZammad GmbH / Zammad>= *, < 1.5.0unknown
ZammadZammad GmbH / Zammad>= 1.5.0, < 7.2.2affected
ZammadZammad GmbH / Zammad>= 7.2.2, < *unaffected