GHSA-xmw5-m2wg-4243

Zammad Enterprise Helpdesk Session Hijacking Vulnerability Leads to Unauthenticated Remote Code Execution (CVE-2026-102489)

An authentication bypass in Zammad helpdesk versions 6.3.0–6.5.4 allows remote attackers to hijack administrative sessions and achieve remote code execution.