Log in Start free

Zammad

Products

ProductCVEsExploitedLatest
Zammad46–Nov 4, 2026

Exploited and recent CVEs

  • CVE-2026-102345 Medium 5.1 Zammad: Stored XSS in ticket article rendering in the new Vue-based interface 0.2%
  • CVE-2026-63208 Medium 5.1 Zammad: Microsoft Graph error logs expose partially masked OAuth access tokens 0.3%
  • CVE-2026-63006 Medium 5.3 Zammad: HTML sanitizer API path allowlist bypass via interior path traversal in img src/srcset 0.5%
  • CVE-2026-63204 Low 2.3 Zammad: Authenticated agents can read AI summary error messages from inaccessible tickets 0.3%
  • CVE-2026-61855 Medium 5.3 Zammad: Invalid PGP Detached Signatures Reported as Good Signature on Inbound Mail 0.2%
  • CVE-2026-84461 Medium 6.9 Zammad: Missing rate limiting allows password brute-forcing during two-factor login 0.3%
  • CVE-2026-63207 Medium 6.9 Zammad: Sensitive Information Exposure in Integration Administration API 0.2%
  • CVE-2026-84465 High 7.1 Zammad: S/MIME signature verification allows forged sender impersonation 0.1%
  • CVE-2026-84463 Medium 6.3 Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attribute 0.1%
  • CVE-2026-84464 High 7.1 Zammad: IDOR in External Data Source rendering exposes ticket, user, group, and organization data 0.3%
  • CVE-2026-63216 Medium 5.3 Zammad: Stored XSS via unescaped option labels in the object attribute options context UI 0.2%
  • CVE-2026-84458 Critical 9.1 Zammad: Account takeover via unverified email matching during SSO auto-link 0.4%
  • CVE-2026-84460 Medium 5.3 Zammad: Missing Authorization in TagsController#list Allows Cross-Object Tag Enumeration 0.3%
  • CVE-2026-63206 Medium 5.3 Zammad: Remote image tracking bypass via shortened URL scheme 0.3%
  • CVE-2026-63205 Medium 5.1 Zammad: Channel admins can read unauthorized attachments via signature rich-text body 0.3%
  • CVE-2026-84462 High 8.6 Zammad: AI Agent template sanitizer bypass leads to remote code execution 0.3%
  • CVE-2026-65828 Low 2.3 Zammad: Pending upload deletion bypass via legacy attachment endpoint 0.2%
  • CVE-2026-61525 High 8.8 Zammad: Arbitrary File Deletion via Unvalidated Session Identifier in Long Polling Controller 0.4%
  • CVE-2026-56728 Medium 5.3 Zammad: Cross-User Taskbar Item Access Control Vulnerability 0.3%
  • CVE-2026-56725 High 8.7 Zammad: Denial of Service via OTRS Import Controller 0.4%
  • CVE-2026-56732 Medium 5.3 Zammad: Malicious input in Ticket Body Enables Session Termination 0.2%
  • CVE-2026-56730 Low 2.1 Zammad: Missing authorization in GraphQL mutation for suggesting knowledge base answers 0.4%
  • CVE-2026-56733 High 8.7 Zammad: Incorrect Authorization and Improper Privilege Management 0.3%
  • CVE-2026-56731 High 8.4 Zammad: Cross-Site Scripting in Ticket Notifications 0.2%
  • CVE-2026-56735 Medium 5.3 Zammad: Improper neutralization of `srcset` attribute in IMG tags in Zammad 0.4%
  • CVE-2026-56727 High 7.1 Zammad: PGP signature spoofing via unvalidated verification return 0.2%
  • CVE-2026-56734 Medium 5.3 Zammad: Avatar Image URL Server-Side Request Forwarding 0.4%
  • CVE-2026-56726 Medium 5.1 Zammad: Missing authorization check in GitHub + GitLab integration allows cross-ticket data leak 0.3%
  • CVE-2026-56729 Low 2.1 Zammad: Titles of knowledge base answers will be shown across all categories via the global search 0.4%
  • CVE-2026-56723 High 7.1 Zammad: Missing authorization on ticket attachment download 0.3%