Vendor

Zammad GmbH

Follow Zammad GmbHFree accountCovers every Zammad GmbH product. No need to list them.

2 known exploited

Zammad GmbH news

CriticalAct nowExploitedCISA KEV

Zammad GmbH Zammad Improper Privilege Management Vulnerability (CVE-2026-102490) is being actively exploited, CISA warns

CISA added CVE-2026-102490 (Zammad GmbH Zammad) to its Known Exploited Vulnerabilities catalog on October 2, 2026, which means there is reliable evidence of exploitation in the wild. Zammad GmbH Zammad contains an improper privilege management vulnerability that can allow the local zammad user to escalate privileges to root. This vulnerability can be chained with CVE-2026-102489.

Why it matters

CISA lists this as exploited in the wild. Unpatched Zammad systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited Vulnerabilities · 3 sources

Government advisoryCISA Known Exploited Vulnerabilities
Government advisoryCISA Known Exploited Vulnerabilities
Government advisoryCISA Cybersecurity Advisories

4 days agoEnterpriseSecurity pros

Recent intelligence

The latest developments from the last 30 days, newest first.

Severity raisedUpdateKEVOct 2, 2026
UPDATE: severity raised to critical: Zammad GmbH Zammad Improper Privilege Management Vulnerability (CVE-2026-102490) is being actively exploited, CISA warns
Basis: CISA Known Exploited Vulnerabilities (government advisory)
Added to CISA KEVUpdateCVE-2026-102489Oct 2, 2026
CVE-2026-102489 added to CISA KEV: Zammad GmbH Zammad, Zammad GmbH Zammad Session Fixation Vulnerability
Basis: CISA Known Exploited Vulnerabilities catalog
AdvisoryKEVOct 2, 2026
Zammad GmbH Zammad Improper Privilege Management Vulnerability (CVE-2026-102490) is being actively exploited, CISA warns
Basis: CISA Known Exploited Vulnerabilities (government advisory)
Added to CISA KEVCVE-2026-102490Oct 2, 2026
CVE-2026-102490 added to CISA KEV: Zammad GmbH Zammad, Zammad GmbH Zammad Improper Privilege Management Vulnerability
Basis: CISA Known Exploited Vulnerabilities catalog