Topic
2 articles
CyberSecureToday covers Zammad across 2 articles published between 1 Oct 2026 and 5 Oct 2026.
The coverage includes 2 vulnerability advisories. 2 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.
Stories on Zammad most often intersect with CISA KEV, Session Fixation and Privilege Escalation, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Zammad Helpdesk Exploit Chain Pairs Session Fixation With Root Escalation for Takeover”, was published 5 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
LinuxAttackers are weaponizing an exploit chain in Zammad helpdesk combining session fixation (CVE-2026-102489) with root privilege escalation (CVE-2026-102490).
Threat IntelAn authentication bypass in Zammad helpdesk versions 6.3.0–6.5.4 allows remote attackers to hijack administrative sessions and achieve remote code execution.