Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*

1 brief RSS
critical threat

Active Exploitation of Zammad Remote Code Execution and Privilege Escalation Vulnerabilities

Zammad helpdesk software is being actively exploited via two zero-day vulnerabilities, including an unauthenticated RCE (CVE-2026-102489) and an unpatched privilege escalation flaw (CVE-2026-102490).

exploited Zammad +2 vulnerability rce privilege-escalation webserver
2t 2c updated