Session Fixation

Zammad Helpdesk Exploit Chain Combines Session Fixation and Root Privilege Escalation for Full Server Takeover (CVE-2026-102490)

Attackers are weaponizing an exploit chain in Zammad helpdesk combining session fixation (CVE-2026-102489) with root privilege escalation (CVE-2026-102490).