CVE Tools
Track your stack

Zammad

123 CVEs tracked. 2 of them are in CISA KEV.

This hub aggregates every CVE we track for Zammad, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Zammad CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Zammad CVEs per month
MonthCVEs
2024-110
2024-121
2025-010
2025-020
2025-030
2025-044
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-0410
2026-050
2026-060
2026-070
2026-081
2026-0932
2026-100

Severity

How the 123 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1112%
  • High1921%
  • Medium6267%

Latest CVEs

The 15 most recently published vulnerabilities affecting Zammad.

  1. CVE-2026-102490Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package7.8
  2. CVE-2026-102489Undisclosed RCE in Zammad v6.3 and higher9.8
  3. CVE-2026-63208Zammad: Microsoft Graph error logs expose partially masked OAuth access tokens—
  4. CVE-2026-63006Zammad: HTML sanitizer API path allowlist bypass via interior path traversal in img src/srcset—
  5. CVE-2026-63204Zammad: Authenticated agents can read AI summary error messages from inaccessible tickets—
  6. CVE-2026-61855Zammad: Invalid PGP Detached Signatures Reported as Good Signature on Inbound Mail—
  7. CVE-2026-84461Zammad: Missing rate limiting allows password brute-forcing during two-factor login—
  8. CVE-2026-63207Zammad: Sensitive Information Exposure in Integration Administration API—
  9. CVE-2026-84465Zammad: S/MIME signature verification allows forged sender impersonation—
  10. CVE-2026-84463Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attribute—
  11. CVE-2026-84464Zammad: IDOR in External Data Source rendering exposes ticket, user, group, and organization data—
  12. CVE-2026-63216Zammad: Stored XSS via unescaped option labels in the object attribute options context UI—
  13. CVE-2026-84458Zammad: Account takeover via unverified email matching during SSO auto-link—
  14. CVE-2026-84460Zammad: Missing Authorization in TagsController#list Allows Cross-Object Tag Enumeration—
  15. CVE-2026-63206Zammad: Remote image tracking bypass via shortened URL scheme—

Product grouping is registry-driven, with AI assist and human review. How it works