https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T10:55:16.805998+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-102489 CVE-2026-102489 — Undisclosed RCE in Zammad v6.3 and higher 2026-10-01T10:55:16.808321+00:00

Affected: Zammad GmbH Zammad

Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The vulnerability is also present in version 7.0.0 to version 7.1.3, but not exploitable due to environment conditions.