Skip to content
Threat Feed
Subscribe

Vendor

Zammad

2 briefs RSS
medium advisory

Local Privilege Escalation Vulnerability in Zammad

A local attacker can exploit a vulnerability in Zammad to perform privilege escalation on the host system.

Zammad privilege-escalation vulnerability local-access
1t
critical threat

Active Exploitation of Zammad Remote Code Execution and Privilege Escalation Vulnerabilities

Zammad helpdesk software is being actively exploited via two zero-day vulnerabilities, including an unauthenticated RCE (CVE-2026-102489) and an unpatched privilege escalation flaw (CVE-2026-102490).

exploited Zammad +2 vulnerability rce privilege-escalation webserver
2t 2c updated