Brand
Zammad GmbH: actively exploited vulnerabilities
2 vulnerabilities in Zammad GmbH products (Zammad) are in CISA’s catalog of exploited vulnerabilities, 2 of them added in the last 90 days. Last added: October 2, 2026.
-
2 vulnerabilities added in the last 12 months
-
2 exploited vulnerabilities in the catalog, in total
-
2 added in the last 30 days
By category
Add just one Zammad GmbH category to your radar, or open its page.
- Other products 2 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Zammad 2 vulnerabilities · Other products
Name used by CISA: Zammad GmbH. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Zammad GmbH list.
- Rank 1
Zammad GmbH ZammadCVE-2026-102489
Zammad GmbH Zammad Session Fixation Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 9.8critical
Added Oct 2, 2026
- Rank 2
Zammad GmbH ZammadCVE-2026-102490
Zammad GmbH Zammad Improper Privilege Management Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 9.8critical
Added Oct 2, 2026
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.